Warning: Permanently added '[localhost]:40709' (ECDSA) to the list of known hosts.
2026/01/14 04:10:02 fuzzer started
2026/01/14 04:10:03 dialing manager at localhost:38155
syzkaller login: [   43.622140] cgroup: Unknown subsys name 'net'
[   43.679563] cgroup: Unknown subsys name 'cpuset'
[   43.692001] cgroup: Unknown subsys name 'rlimit'
2026/01/14 04:10:12 syscalls: 2214
2026/01/14 04:10:12 code coverage: enabled
2026/01/14 04:10:12 comparison tracing: enabled
2026/01/14 04:10:12 extra coverage: enabled
2026/01/14 04:10:12 setuid sandbox: enabled
2026/01/14 04:10:12 namespace sandbox: enabled
2026/01/14 04:10:12 Android sandbox: enabled
2026/01/14 04:10:12 fault injection: enabled
2026/01/14 04:10:12 leak checking: enabled
2026/01/14 04:10:12 net packet injection: enabled
2026/01/14 04:10:12 net device setup: enabled
2026/01/14 04:10:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/14 04:10:12 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/14 04:10:12 USB emulation: enabled
2026/01/14 04:10:12 hci packet injection: enabled
2026/01/14 04:10:12 wifi device emulation: enabled
2026/01/14 04:10:12 802.15.4 emulation: enabled
2026/01/14 04:10:14 fetching corpus: 50, signal 30453/32254 (executing program)
2026/01/14 04:10:14 fetching corpus: 100, signal 42396/45847 (executing program)
2026/01/14 04:10:14 fetching corpus: 150, signal 54397/59366 (executing program)
2026/01/14 04:10:14 fetching corpus: 200, signal 63819/70173 (executing program)
2026/01/14 04:10:14 fetching corpus: 250, signal 66487/74330 (executing program)
2026/01/14 04:10:14 fetching corpus: 300, signal 70193/79459 (executing program)
2026/01/14 04:10:14 fetching corpus: 350, signal 74949/85551 (executing program)
2026/01/14 04:10:14 fetching corpus: 400, signal 78500/90435 (executing program)
2026/01/14 04:10:15 fetching corpus: 450, signal 82953/96115 (executing program)
2026/01/14 04:10:15 fetching corpus: 500, signal 87408/101728 (executing program)
2026/01/14 04:10:15 fetching corpus: 550, signal 90206/105748 (executing program)
2026/01/14 04:10:15 fetching corpus: 600, signal 92899/109634 (executing program)
2026/01/14 04:10:15 fetching corpus: 650, signal 94952/112949 (executing program)
2026/01/14 04:10:15 fetching corpus: 700, signal 97514/116698 (executing program)
2026/01/14 04:10:15 fetching corpus: 750, signal 100336/120575 (executing program)
2026/01/14 04:10:16 fetching corpus: 800, signal 102153/123543 (executing program)
2026/01/14 04:10:16 fetching corpus: 850, signal 105117/127485 (executing program)
2026/01/14 04:10:16 fetching corpus: 900, signal 108541/131864 (executing program)
2026/01/14 04:10:16 fetching corpus: 950, signal 109842/134352 (executing program)
2026/01/14 04:10:16 fetching corpus: 1000, signal 112697/138115 (executing program)
2026/01/14 04:10:16 fetching corpus: 1050, signal 113890/140432 (executing program)
2026/01/14 04:10:16 fetching corpus: 1100, signal 115502/143084 (executing program)
2026/01/14 04:10:16 fetching corpus: 1150, signal 117011/145610 (executing program)
2026/01/14 04:10:17 fetching corpus: 1200, signal 118106/147771 (executing program)
2026/01/14 04:10:17 fetching corpus: 1250, signal 119753/150374 (executing program)
2026/01/14 04:10:17 fetching corpus: 1300, signal 123053/154405 (executing program)
2026/01/14 04:10:17 fetching corpus: 1350, signal 124343/156639 (executing program)
2026/01/14 04:10:17 fetching corpus: 1400, signal 125657/158898 (executing program)
2026/01/14 04:10:17 fetching corpus: 1450, signal 127351/161503 (executing program)
2026/01/14 04:10:17 fetching corpus: 1500, signal 128397/163548 (executing program)
2026/01/14 04:10:17 fetching corpus: 1550, signal 129791/165837 (executing program)
2026/01/14 04:10:17 fetching corpus: 1600, signal 131201/168144 (executing program)
2026/01/14 04:10:18 fetching corpus: 1650, signal 132290/170163 (executing program)
2026/01/14 04:10:18 fetching corpus: 1700, signal 133416/172170 (executing program)
2026/01/14 04:10:18 fetching corpus: 1750, signal 134168/173892 (executing program)
2026/01/14 04:10:18 fetching corpus: 1800, signal 135178/175829 (executing program)
2026/01/14 04:10:18 fetching corpus: 1850, signal 136091/177689 (executing program)
2026/01/14 04:10:18 fetching corpus: 1900, signal 136826/179380 (executing program)
2026/01/14 04:10:18 fetching corpus: 1950, signal 138235/181530 (executing program)
2026/01/14 04:10:18 fetching corpus: 2000, signal 139970/183931 (executing program)
2026/01/14 04:10:19 fetching corpus: 2050, signal 140712/185607 (executing program)
2026/01/14 04:10:19 fetching corpus: 2100, signal 141413/187193 (executing program)
2026/01/14 04:10:19 fetching corpus: 2150, signal 142522/189100 (executing program)
2026/01/14 04:10:19 fetching corpus: 2200, signal 143623/190954 (executing program)
2026/01/14 04:10:19 fetching corpus: 2250, signal 144403/192600 (executing program)
2026/01/14 04:10:19 fetching corpus: 2300, signal 145313/194318 (executing program)
2026/01/14 04:10:19 fetching corpus: 2350, signal 146708/196427 (executing program)
2026/01/14 04:10:19 fetching corpus: 2400, signal 147842/198232 (executing program)
2026/01/14 04:10:20 fetching corpus: 2450, signal 148590/199782 (executing program)
2026/01/14 04:10:20 fetching corpus: 2500, signal 149210/201220 (executing program)
2026/01/14 04:10:20 fetching corpus: 2550, signal 150726/203269 (executing program)
2026/01/14 04:10:20 fetching corpus: 2600, signal 151697/204952 (executing program)
2026/01/14 04:10:20 fetching corpus: 2650, signal 152686/206639 (executing program)
2026/01/14 04:10:20 fetching corpus: 2700, signal 153274/208047 (executing program)
2026/01/14 04:10:20 fetching corpus: 2750, signal 154021/209550 (executing program)
2026/01/14 04:10:20 fetching corpus: 2800, signal 154752/211016 (executing program)
2026/01/14 04:10:20 fetching corpus: 2850, signal 155673/212612 (executing program)
2026/01/14 04:10:21 fetching corpus: 2900, signal 156270/213984 (executing program)
2026/01/14 04:10:21 fetching corpus: 2950, signal 157221/215598 (executing program)
2026/01/14 04:10:21 fetching corpus: 3000, signal 158022/217055 (executing program)
2026/01/14 04:10:21 fetching corpus: 3050, signal 158939/218619 (executing program)
2026/01/14 04:10:21 fetching corpus: 3100, signal 159533/219988 (executing program)
2026/01/14 04:10:21 fetching corpus: 3150, signal 160293/221403 (executing program)
2026/01/14 04:10:21 fetching corpus: 3200, signal 161221/222874 (executing program)
2026/01/14 04:10:21 fetching corpus: 3250, signal 161868/224211 (executing program)
2026/01/14 04:10:22 fetching corpus: 3300, signal 162634/225593 (executing program)
2026/01/14 04:10:22 fetching corpus: 3350, signal 163925/227279 (executing program)
2026/01/14 04:10:22 fetching corpus: 3400, signal 164618/228629 (executing program)
2026/01/14 04:10:22 fetching corpus: 3450, signal 165275/229942 (executing program)
2026/01/14 04:10:22 fetching corpus: 3500, signal 166000/231295 (executing program)
2026/01/14 04:10:22 fetching corpus: 3550, signal 166846/232670 (executing program)
2026/01/14 04:10:22 fetching corpus: 3600, signal 167557/233975 (executing program)
2026/01/14 04:10:22 fetching corpus: 3650, signal 168118/235219 (executing program)
2026/01/14 04:10:22 fetching corpus: 3700, signal 168716/236467 (executing program)
2026/01/14 04:10:23 fetching corpus: 3750, signal 169343/237703 (executing program)
2026/01/14 04:10:23 fetching corpus: 3800, signal 170182/238996 (executing program)
2026/01/14 04:10:23 fetching corpus: 3850, signal 170860/240204 (executing program)
2026/01/14 04:10:23 fetching corpus: 3900, signal 171705/241557 (executing program)
2026/01/14 04:10:23 fetching corpus: 3950, signal 172384/242795 (executing program)
2026/01/14 04:10:23 fetching corpus: 4000, signal 173031/244024 (executing program)
2026/01/14 04:10:23 fetching corpus: 4050, signal 173652/245227 (executing program)
2026/01/14 04:10:23 fetching corpus: 4100, signal 174309/246453 (executing program)
2026/01/14 04:10:24 fetching corpus: 4150, signal 175015/247683 (executing program)
2026/01/14 04:10:24 fetching corpus: 4200, signal 175704/248866 (executing program)
2026/01/14 04:10:24 fetching corpus: 4250, signal 176028/249932 (executing program)
2026/01/14 04:10:24 fetching corpus: 4300, signal 176603/251076 (executing program)
2026/01/14 04:10:24 fetching corpus: 4350, signal 177149/252179 (executing program)
2026/01/14 04:10:24 fetching corpus: 4400, signal 177769/253304 (executing program)
2026/01/14 04:10:24 fetching corpus: 4450, signal 178305/254404 (executing program)
2026/01/14 04:10:24 fetching corpus: 4500, signal 178717/255385 (executing program)
2026/01/14 04:10:24 fetching corpus: 4550, signal 179225/256462 (executing program)
2026/01/14 04:10:24 fetching corpus: 4600, signal 179764/257560 (executing program)
2026/01/14 04:10:25 fetching corpus: 4650, signal 180267/258676 (executing program)
2026/01/14 04:10:25 fetching corpus: 4700, signal 180683/259661 (executing program)
2026/01/14 04:10:25 fetching corpus: 4750, signal 181107/260665 (executing program)
2026/01/14 04:10:25 fetching corpus: 4800, signal 181539/261661 (executing program)
2026/01/14 04:10:25 fetching corpus: 4850, signal 181849/262594 (executing program)
2026/01/14 04:10:25 fetching corpus: 4900, signal 182592/263731 (executing program)
2026/01/14 04:10:25 fetching corpus: 4950, signal 183022/264745 (executing program)
2026/01/14 04:10:25 fetching corpus: 5000, signal 183372/265681 (executing program)
2026/01/14 04:10:25 fetching corpus: 5050, signal 183766/266618 (executing program)
2026/01/14 04:10:25 fetching corpus: 5100, signal 184092/267539 (executing program)
2026/01/14 04:10:26 fetching corpus: 5150, signal 184483/268507 (executing program)
2026/01/14 04:10:26 fetching corpus: 5200, signal 185202/269575 (executing program)
2026/01/14 04:10:26 fetching corpus: 5250, signal 185820/270594 (executing program)
2026/01/14 04:10:26 fetching corpus: 5300, signal 186195/271541 (executing program)
2026/01/14 04:10:26 fetching corpus: 5350, signal 186656/272481 (executing program)
2026/01/14 04:10:26 fetching corpus: 5400, signal 186916/273348 (executing program)
2026/01/14 04:10:26 fetching corpus: 5450, signal 187395/274260 (executing program)
2026/01/14 04:10:26 fetching corpus: 5500, signal 187817/275149 (executing program)
2026/01/14 04:10:26 fetching corpus: 5550, signal 188215/276094 (executing program)
2026/01/14 04:10:26 fetching corpus: 5600, signal 188644/277041 (executing program)
2026/01/14 04:10:27 fetching corpus: 5650, signal 189120/277929 (executing program)
2026/01/14 04:10:27 fetching corpus: 5700, signal 189576/278864 (executing program)
2026/01/14 04:10:27 fetching corpus: 5750, signal 189913/279771 (executing program)
2026/01/14 04:10:27 fetching corpus: 5800, signal 190401/280699 (executing program)
2026/01/14 04:10:27 fetching corpus: 5850, signal 190770/281590 (executing program)
2026/01/14 04:10:27 fetching corpus: 5900, signal 191101/282494 (executing program)
2026/01/14 04:10:27 fetching corpus: 5950, signal 191487/283331 (executing program)
2026/01/14 04:10:27 fetching corpus: 6000, signal 191847/284231 (executing program)
2026/01/14 04:10:27 fetching corpus: 6050, signal 192136/285046 (executing program)
2026/01/14 04:10:28 fetching corpus: 6100, signal 192633/285944 (executing program)
2026/01/14 04:10:28 fetching corpus: 6150, signal 193280/286855 (executing program)
2026/01/14 04:10:28 fetching corpus: 6200, signal 193888/287733 (executing program)
2026/01/14 04:10:28 fetching corpus: 6250, signal 194640/288588 (executing program)
2026/01/14 04:10:28 fetching corpus: 6300, signal 194989/289399 (executing program)
2026/01/14 04:10:28 fetching corpus: 6350, signal 195297/290218 (executing program)
2026/01/14 04:10:28 fetching corpus: 6400, signal 195670/291043 (executing program)
2026/01/14 04:10:28 fetching corpus: 6450, signal 195967/291831 (executing program)
2026/01/14 04:10:28 fetching corpus: 6500, signal 196297/292676 (executing program)
2026/01/14 04:10:28 fetching corpus: 6550, signal 196694/293502 (executing program)
2026/01/14 04:10:29 fetching corpus: 6600, signal 197397/294345 (executing program)
2026/01/14 04:10:29 fetching corpus: 6650, signal 197808/295159 (executing program)
2026/01/14 04:10:29 fetching corpus: 6700, signal 198233/295981 (executing program)
2026/01/14 04:10:29 fetching corpus: 6750, signal 198654/296773 (executing program)
2026/01/14 04:10:29 fetching corpus: 6800, signal 199109/297581 (executing program)
2026/01/14 04:10:29 fetching corpus: 6850, signal 199368/298359 (executing program)
2026/01/14 04:10:29 fetching corpus: 6900, signal 199780/299105 (executing program)
2026/01/14 04:10:29 fetching corpus: 6950, signal 200139/299892 (executing program)
2026/01/14 04:10:30 fetching corpus: 7000, signal 200543/300623 (executing program)
2026/01/14 04:10:30 fetching corpus: 7050, signal 200951/301339 (executing program)
2026/01/14 04:10:30 fetching corpus: 7100, signal 201264/302067 (executing program)
2026/01/14 04:10:30 fetching corpus: 7150, signal 201524/302797 (executing program)
2026/01/14 04:10:30 fetching corpus: 7200, signal 201819/303500 (executing program)
2026/01/14 04:10:30 fetching corpus: 7250, signal 202100/304204 (executing program)
2026/01/14 04:10:30 fetching corpus: 7300, signal 202391/304920 (executing program)
2026/01/14 04:10:30 fetching corpus: 7350, signal 202908/305651 (executing program)
2026/01/14 04:10:30 fetching corpus: 7400, signal 203210/306356 (executing program)
2026/01/14 04:10:31 fetching corpus: 7450, signal 203693/307062 (executing program)
2026/01/14 04:10:31 fetching corpus: 7500, signal 204222/307740 (executing program)
2026/01/14 04:10:31 fetching corpus: 7550, signal 204684/308456 (executing program)
2026/01/14 04:10:31 fetching corpus: 7600, signal 205030/309107 (executing program)
2026/01/14 04:10:31 fetching corpus: 7650, signal 205385/309806 (executing program)
2026/01/14 04:10:31 fetching corpus: 7700, signal 205738/310512 (executing program)
2026/01/14 04:10:31 fetching corpus: 7750, signal 206178/311037 (executing program)
2026/01/14 04:10:31 fetching corpus: 7800, signal 206533/311037 (executing program)
2026/01/14 04:10:31 fetching corpus: 7850, signal 206952/311037 (executing program)
2026/01/14 04:10:32 fetching corpus: 7900, signal 207410/311039 (executing program)
2026/01/14 04:10:32 fetching corpus: 7950, signal 207706/311039 (executing program)
2026/01/14 04:10:32 fetching corpus: 8000, signal 208015/311039 (executing program)
2026/01/14 04:10:32 fetching corpus: 8050, signal 208244/311039 (executing program)
2026/01/14 04:10:32 fetching corpus: 8100, signal 208566/311039 (executing program)
2026/01/14 04:10:32 fetching corpus: 8150, signal 208837/311043 (executing program)
2026/01/14 04:10:32 fetching corpus: 8200, signal 209019/311043 (executing program)
2026/01/14 04:10:32 fetching corpus: 8250, signal 209393/311044 (executing program)
2026/01/14 04:10:32 fetching corpus: 8300, signal 209716/311044 (executing program)
2026/01/14 04:10:33 fetching corpus: 8350, signal 210109/311045 (executing program)
2026/01/14 04:10:33 fetching corpus: 8400, signal 210476/311046 (executing program)
2026/01/14 04:10:33 fetching corpus: 8450, signal 210738/311046 (executing program)
2026/01/14 04:10:33 fetching corpus: 8500, signal 211040/311046 (executing program)
2026/01/14 04:10:33 fetching corpus: 8550, signal 211256/311046 (executing program)
2026/01/14 04:10:33 fetching corpus: 8600, signal 211655/311046 (executing program)
2026/01/14 04:10:33 fetching corpus: 8650, signal 212072/311046 (executing program)
2026/01/14 04:10:33 fetching corpus: 8700, signal 212403/311060 (executing program)
2026/01/14 04:10:33 fetching corpus: 8750, signal 212624/311060 (executing program)
2026/01/14 04:10:34 fetching corpus: 8800, signal 212933/311061 (executing program)
2026/01/14 04:10:34 fetching corpus: 8850, signal 213225/311061 (executing program)
2026/01/14 04:10:34 fetching corpus: 8900, signal 213533/311062 (executing program)
2026/01/14 04:10:34 fetching corpus: 8950, signal 213792/311062 (executing program)
2026/01/14 04:10:34 fetching corpus: 9000, signal 214032/311062 (executing program)
2026/01/14 04:10:34 fetching corpus: 9050, signal 214298/311068 (executing program)
2026/01/14 04:10:34 fetching corpus: 9100, signal 214527/311068 (executing program)
2026/01/14 04:10:34 fetching corpus: 9150, signal 214818/311068 (executing program)
2026/01/14 04:10:34 fetching corpus: 9200, signal 215115/311068 (executing program)
2026/01/14 04:10:35 fetching corpus: 9250, signal 215449/311068 (executing program)
2026/01/14 04:10:35 fetching corpus: 9300, signal 215689/311068 (executing program)
2026/01/14 04:10:35 fetching corpus: 9350, signal 216003/311068 (executing program)
2026/01/14 04:10:35 fetching corpus: 9400, signal 216288/311071 (executing program)
2026/01/14 04:10:35 fetching corpus: 9450, signal 216559/311074 (executing program)
2026/01/14 04:10:35 fetching corpus: 9500, signal 216862/311074 (executing program)
2026/01/14 04:10:35 fetching corpus: 9550, signal 217140/311074 (executing program)
2026/01/14 04:10:35 fetching corpus: 9600, signal 217348/311074 (executing program)
2026/01/14 04:10:35 fetching corpus: 9650, signal 217647/311075 (executing program)
2026/01/14 04:10:36 fetching corpus: 9700, signal 217883/311075 (executing program)
2026/01/14 04:10:36 fetching corpus: 9750, signal 218138/311075 (executing program)
2026/01/14 04:10:36 fetching corpus: 9800, signal 218429/311075 (executing program)
2026/01/14 04:10:36 fetching corpus: 9850, signal 218683/311075 (executing program)
2026/01/14 04:10:36 fetching corpus: 9900, signal 218991/311075 (executing program)
2026/01/14 04:10:36 fetching corpus: 9950, signal 219528/311075 (executing program)
2026/01/14 04:10:36 fetching corpus: 10000, signal 219793/311077 (executing program)
2026/01/14 04:10:36 fetching corpus: 10050, signal 220069/311087 (executing program)
2026/01/14 04:10:36 fetching corpus: 10100, signal 220331/311087 (executing program)
2026/01/14 04:10:36 fetching corpus: 10150, signal 220718/311087 (executing program)
2026/01/14 04:10:36 fetching corpus: 10200, signal 221051/311087 (executing program)
2026/01/14 04:10:37 fetching corpus: 10250, signal 221326/311103 (executing program)
2026/01/14 04:10:37 fetching corpus: 10300, signal 221510/311103 (executing program)
2026/01/14 04:10:37 fetching corpus: 10350, signal 221786/311104 (executing program)
2026/01/14 04:10:37 fetching corpus: 10400, signal 221991/311105 (executing program)
2026/01/14 04:10:37 fetching corpus: 10450, signal 222234/311105 (executing program)
2026/01/14 04:10:37 fetching corpus: 10500, signal 222494/311105 (executing program)
2026/01/14 04:10:37 fetching corpus: 10550, signal 222779/311106 (executing program)
2026/01/14 04:10:37 fetching corpus: 10600, signal 223072/311106 (executing program)
2026/01/14 04:10:37 fetching corpus: 10650, signal 223334/311106 (executing program)
2026/01/14 04:10:37 fetching corpus: 10700, signal 223590/311106 (executing program)
2026/01/14 04:10:37 fetching corpus: 10750, signal 223832/311110 (executing program)
2026/01/14 04:10:38 fetching corpus: 10800, signal 224096/311111 (executing program)
2026/01/14 04:10:38 fetching corpus: 10850, signal 224304/311111 (executing program)
2026/01/14 04:10:38 fetching corpus: 10900, signal 224557/311114 (executing program)
2026/01/14 04:10:38 fetching corpus: 10950, signal 224829/311114 (executing program)
2026/01/14 04:10:38 fetching corpus: 11000, signal 225027/311117 (executing program)
2026/01/14 04:10:38 fetching corpus: 11050, signal 225248/311119 (executing program)
2026/01/14 04:10:38 fetching corpus: 11100, signal 225716/311119 (executing program)
2026/01/14 04:10:39 fetching corpus: 11150, signal 226012/311119 (executing program)
2026/01/14 04:10:39 fetching corpus: 11200, signal 226218/311119 (executing program)
2026/01/14 04:10:39 fetching corpus: 11250, signal 226421/311119 (executing program)
2026/01/14 04:10:39 fetching corpus: 11300, signal 226709/311126 (executing program)
2026/01/14 04:10:39 fetching corpus: 11350, signal 226910/311126 (executing program)
2026/01/14 04:10:39 fetching corpus: 11400, signal 227106/311126 (executing program)
2026/01/14 04:10:39 fetching corpus: 11450, signal 227327/311126 (executing program)
2026/01/14 04:10:39 fetching corpus: 11500, signal 227523/311126 (executing program)
2026/01/14 04:10:39 fetching corpus: 11550, signal 227682/311126 (executing program)
2026/01/14 04:10:40 fetching corpus: 11600, signal 227929/311126 (executing program)
2026/01/14 04:10:40 fetching corpus: 11650, signal 228213/311126 (executing program)
2026/01/14 04:10:40 fetching corpus: 11700, signal 228425/311126 (executing program)
2026/01/14 04:10:40 fetching corpus: 11750, signal 228624/311126 (executing program)
2026/01/14 04:10:40 fetching corpus: 11800, signal 228809/311128 (executing program)
2026/01/14 04:10:40 fetching corpus: 11850, signal 228978/311130 (executing program)
2026/01/14 04:10:40 fetching corpus: 11900, signal 229264/311130 (executing program)
2026/01/14 04:10:40 fetching corpus: 11950, signal 229465/311132 (executing program)
2026/01/14 04:10:40 fetching corpus: 12000, signal 229713/311132 (executing program)
2026/01/14 04:10:40 fetching corpus: 12050, signal 229898/311133 (executing program)
2026/01/14 04:10:41 fetching corpus: 12100, signal 230125/311133 (executing program)
2026/01/14 04:10:41 fetching corpus: 12150, signal 230573/311133 (executing program)
2026/01/14 04:10:41 fetching corpus: 12200, signal 230777/311133 (executing program)
2026/01/14 04:10:41 fetching corpus: 12250, signal 231046/311133 (executing program)
2026/01/14 04:10:41 fetching corpus: 12300, signal 231245/311133 (executing program)
2026/01/14 04:10:41 fetching corpus: 12350, signal 231499/311133 (executing program)
2026/01/14 04:10:41 fetching corpus: 12400, signal 231718/311134 (executing program)
2026/01/14 04:10:41 fetching corpus: 12450, signal 232034/311134 (executing program)
2026/01/14 04:10:41 fetching corpus: 12500, signal 232299/311134 (executing program)
2026/01/14 04:10:42 fetching corpus: 12550, signal 232572/311138 (executing program)
2026/01/14 04:10:42 fetching corpus: 12600, signal 232808/311138 (executing program)
2026/01/14 04:10:42 fetching corpus: 12650, signal 233031/311138 (executing program)
2026/01/14 04:10:42 fetching corpus: 12700, signal 233212/311138 (executing program)
2026/01/14 04:10:42 fetching corpus: 12750, signal 233530/311139 (executing program)
2026/01/14 04:10:42 fetching corpus: 12800, signal 233748/311140 (executing program)
2026/01/14 04:10:42 fetching corpus: 12850, signal 233969/311142 (executing program)
2026/01/14 04:10:42 fetching corpus: 12900, signal 234143/311142 (executing program)
2026/01/14 04:10:43 fetching corpus: 12950, signal 234359/311142 (executing program)
2026/01/14 04:10:43 fetching corpus: 13000, signal 234575/311142 (executing program)
2026/01/14 04:10:43 fetching corpus: 13050, signal 234777/311142 (executing program)
2026/01/14 04:10:43 fetching corpus: 13100, signal 235100/311142 (executing program)
2026/01/14 04:10:43 fetching corpus: 13150, signal 235296/311143 (executing program)
2026/01/14 04:10:43 fetching corpus: 13200, signal 235475/311143 (executing program)
2026/01/14 04:10:43 fetching corpus: 13250, signal 235708/311143 (executing program)
2026/01/14 04:10:43 fetching corpus: 13300, signal 235919/311143 (executing program)
2026/01/14 04:10:43 fetching corpus: 13350, signal 236141/311143 (executing program)
2026/01/14 04:10:43 fetching corpus: 13400, signal 236389/311143 (executing program)
2026/01/14 04:10:44 fetching corpus: 13450, signal 236604/311143 (executing program)
2026/01/14 04:10:44 fetching corpus: 13500, signal 236814/311143 (executing program)
2026/01/14 04:10:44 fetching corpus: 13550, signal 237039/311143 (executing program)
2026/01/14 04:10:44 fetching corpus: 13600, signal 237316/311144 (executing program)
2026/01/14 04:10:44 fetching corpus: 13650, signal 237600/311144 (executing program)
2026/01/14 04:10:44 fetching corpus: 13700, signal 237766/311144 (executing program)
2026/01/14 04:10:44 fetching corpus: 13750, signal 237958/311144 (executing program)
2026/01/14 04:10:44 fetching corpus: 13800, signal 238103/311144 (executing program)
2026/01/14 04:10:44 fetching corpus: 13850, signal 238253/311144 (executing program)
2026/01/14 04:10:45 fetching corpus: 13900, signal 238528/311144 (executing program)
2026/01/14 04:10:45 fetching corpus: 13950, signal 238836/311144 (executing program)
2026/01/14 04:10:45 fetching corpus: 14000, signal 239045/311144 (executing program)
2026/01/14 04:10:45 fetching corpus: 14050, signal 239277/311147 (executing program)
2026/01/14 04:10:45 fetching corpus: 14100, signal 239460/311147 (executing program)
2026/01/14 04:10:45 fetching corpus: 14150, signal 239806/311149 (executing program)
2026/01/14 04:10:45 fetching corpus: 14200, signal 240024/311150 (executing program)
2026/01/14 04:10:45 fetching corpus: 14250, signal 240225/311150 (executing program)
2026/01/14 04:10:45 fetching corpus: 14300, signal 240448/311156 (executing program)
2026/01/14 04:10:46 fetching corpus: 14350, signal 240652/311156 (executing program)
2026/01/14 04:10:46 fetching corpus: 14400, signal 240819/311156 (executing program)
2026/01/14 04:10:46 fetching corpus: 14450, signal 241000/311156 (executing program)
2026/01/14 04:10:46 fetching corpus: 14500, signal 241246/311156 (executing program)
2026/01/14 04:10:46 fetching corpus: 14550, signal 241419/311156 (executing program)
2026/01/14 04:10:46 fetching corpus: 14600, signal 241585/311157 (executing program)
2026/01/14 04:10:46 fetching corpus: 14650, signal 241759/311157 (executing program)
2026/01/14 04:10:46 fetching corpus: 14700, signal 241930/311157 (executing program)
2026/01/14 04:10:47 fetching corpus: 14750, signal 242131/311157 (executing program)
2026/01/14 04:10:47 fetching corpus: 14800, signal 242387/311157 (executing program)
2026/01/14 04:10:47 fetching corpus: 14850, signal 242604/311157 (executing program)
2026/01/14 04:10:47 fetching corpus: 14900, signal 242865/311157 (executing program)
2026/01/14 04:10:47 fetching corpus: 14950, signal 243476/311158 (executing program)
2026/01/14 04:10:47 fetching corpus: 15000, signal 243717/311159 (executing program)
2026/01/14 04:10:47 fetching corpus: 15050, signal 243963/311170 (executing program)
2026/01/14 04:10:47 fetching corpus: 15100, signal 244170/311173 (executing program)
2026/01/14 04:10:47 fetching corpus: 15150, signal 244361/311173 (executing program)
2026/01/14 04:10:47 fetching corpus: 15200, signal 244499/311173 (executing program)
2026/01/14 04:10:47 fetching corpus: 15250, signal 244655/311173 (executing program)
2026/01/14 04:10:48 fetching corpus: 15300, signal 244826/311176 (executing program)
2026/01/14 04:10:48 fetching corpus: 15350, signal 244993/311176 (executing program)
2026/01/14 04:10:48 fetching corpus: 15400, signal 245158/311176 (executing program)
2026/01/14 04:10:48 fetching corpus: 15450, signal 245298/311176 (executing program)
2026/01/14 04:10:48 fetching corpus: 15500, signal 245460/311177 (executing program)
2026/01/14 04:10:48 fetching corpus: 15550, signal 245659/311177 (executing program)
2026/01/14 04:10:48 fetching corpus: 15600, signal 245847/311179 (executing program)
2026/01/14 04:10:48 fetching corpus: 15650, signal 246081/311179 (executing program)
2026/01/14 04:10:48 fetching corpus: 15700, signal 246245/311179 (executing program)
2026/01/14 04:10:48 fetching corpus: 15750, signal 246444/311179 (executing program)
2026/01/14 04:10:48 fetching corpus: 15800, signal 246673/311182 (executing program)
2026/01/14 04:10:49 fetching corpus: 15850, signal 246834/311182 (executing program)
2026/01/14 04:10:49 fetching corpus: 15900, signal 247018/311184 (executing program)
2026/01/14 04:10:49 fetching corpus: 15950, signal 247159/311186 (executing program)
2026/01/14 04:10:49 fetching corpus: 16000, signal 247324/311186 (executing program)
2026/01/14 04:10:49 fetching corpus: 16050, signal 247496/311186 (executing program)
2026/01/14 04:10:49 fetching corpus: 16100, signal 247641/311188 (executing program)
2026/01/14 04:10:49 fetching corpus: 16150, signal 247841/311188 (executing program)
2026/01/14 04:10:49 fetching corpus: 16200, signal 248013/311194 (executing program)
2026/01/14 04:10:49 fetching corpus: 16250, signal 248195/311195 (executing program)
2026/01/14 04:10:50 fetching corpus: 16300, signal 248430/311195 (executing program)
2026/01/14 04:10:50 fetching corpus: 16350, signal 248585/311195 (executing program)
2026/01/14 04:10:50 fetching corpus: 16400, signal 248856/311200 (executing program)
2026/01/14 04:10:50 fetching corpus: 16450, signal 248999/311200 (executing program)
2026/01/14 04:10:50 fetching corpus: 16500, signal 249172/311204 (executing program)
2026/01/14 04:10:50 fetching corpus: 16550, signal 249381/311204 (executing program)
2026/01/14 04:10:50 fetching corpus: 16586, signal 249551/311204 (executing program)
2026/01/14 04:10:50 fetching corpus: 16586, signal 249551/311204 (executing program)
2026/01/14 04:10:52 starting 8 fuzzer processes
04:10:52 executing program 0:
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000))
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x4c, 0x1, 0x8, "73c9204d91701245440e8fd44a8cf93b", "8e4df19fbb7e137464c7048f72f034764e2202c5bdbb3f5fbb12427c47880949741e832284062ce4e36f75d1d06e4ca50c6cff0fad4c50"}, 0x4c, 0x1)
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]})
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="7dbfc1683855a053f2e8d8e140b5a1b2d6a8a81e78d9c0d6c183dfcce5aa3ce04903a96ce9c95f73ab1c0e47b9311b019838267c74b706ed9052110a2306dda02f125aa948d379f8c4105dea9e9261f83d85ffa9ec993e8b9e8d380dc8203e27fb38cdea64c0911ee887fc003f150e9ed66fd5a63ad565b8689b92ff68880e8f1f549f5cd4f2accf966ea70d", 0x8c}], 0x1)
ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x3)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x55, 0x6ec}}, './file0\x00'})
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
sendfile(r1, r1, &(0x7f0000000300)=0x6, 0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x40000020})
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = signalfd4(r2, &(0x7f0000000480)={[0x8000]}, 0x8, 0x80800)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000680)={{0x5, 0x3}, 'port1\x00', 0x82, 0x140008, 0xfffffffb, 0x3f, 0x0, 0x9, 0x6a, 0x0, 0x2, 0x80})
lseek(0xffffffffffffffff, 0xeba2, 0x0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000010}, 0x1)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x400c010)

04:10:52 executing program 1:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x76e9)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x3ff, 0x7})
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
connect(r0, &(0x7f00000000c0)=@ethernet={0x0, @remote}, 0x80)
sendmmsg$sock(r0, &(0x7f0000000b40)=[{{&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="99683067defd84370a5cfd8a12fa195e9d724c5dccbc20cc9d77cd46e037c15b5dd3bf25bf36aa6323716aaea6e2a28d220b04adf9d5485970bf986d3555", 0x3e}, {&(0x7f0000000200)="9e2e82b506893c353a5c2303fc6fe49086118a980c76c0df6e2de1226ce13866df3aa343237a2c2f9e1537e8ecd7c5c0cd37ce8107f4e6801f9022d5f68113a87755af917197334a5163993728fe3ddde9933a78134bf71fc917df339aadf8ce5c79bf982aebbd3afb4d9357859c4ea46b0b1bab2ea46698187e2b078c6742bf15377a2245e5c91a016a7a3364b16dbb571a4629622e091ab913a50936079308a502983d8b7a77681aaf66e8e1b6658d45311b6a8bde322ef7cb767f2a1452136bdbd7f48cdc5a416a3b0009ea4bc9aed8c6f7824fabd499f7a0918a103f7b180b5b567ac6550e05b52d2e4a7cdfdba0", 0xf0}, {&(0x7f0000000300)="32c4d6a39a4c2a23d7fecbbf5dc2bcec128ecd3118dd5700ea0efad3d781198589ea533d800fb187c69b534b571d38ab037e8afc2b22aa031a2219d4ed5c6bf6911d8430926860137a854ec0d195a5134f9813a307f674b6222ea06cb451de9065c89e9f9858587320149b2feb535dfcfccd211788271a8df5db54ad209a413fdc2db3570d4561c5e7cb78f964232c92ef485f1a1deb461ed7001be1e697f3634a6e13b2ee316a280807588705d9842509b344b8fc71ffb38b", 0xb9}], 0x3, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6ebf}}, @mark={{0x14, 0x1, 0x24, 0xde}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xc0}}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)="c51c4d8ddb455c599632c085d572e68dbe935ca94c660c964eb6b5268ad7672e79f4f7272be495edfc6462e4fd2fe34c943b07e8f8830d215e997e99c482dffaf1", 0x41}, {&(0x7f00000005c0)="0467234a2774f9698a3adb7d76a7ad812a2c3c80a8a2fc1707f51c1371ccd5439fe898f18462a063a90cab2f910be2d39496ee04d3d9f47b5c7090f82bb6fcddf609738d0185b6083dfad614bb8c5a3e8462575ae2f6237d49b2be9138c69cf1ad99e32fdf39ad0e1c145814c3593b4685d4e1a25d0351caa15007", 0x7b}, {&(0x7f0000000640)="9813fd3955ab64821350334e39bbc351e58023dbf4dca1767b1ea71f42876bd3921a45981f474d8932cc2177516ab12f1f019ead275cd8ffdfc7b98bfc17fb54418773c8a17a3be8a368ab46ff0f4a6b1fe6cb67c0d4c1b1e2266db7294c1b04c47713d8453fc546812ba5b5ecb941e4", 0x70}, {&(0x7f00000006c0)="b8c1f02f67a062ede77bacfb6d02ff6b472ee2bb553a0f24d4c15b", 0x1b}, {&(0x7f0000000700)="fbf5cbbc3250dda228b30619b71e56c167b4ef03e01bf4cc20", 0x19}, {&(0x7f0000000740)="dc703388c1552eb5ca0961baa04db8077e061225685d7fea2b85e38b7c42f7c3db5049efa7e0749370b9242fb9236013ab0218f850d0a2e787ed4b5737f8cf007f62cd6caf4145ad8637d6ae64314bb5c5c91538ccab4d73803ab55cc4ebb5ec363089ce9510ca5b6c338b9ca1450fa3e6db5e93245d518f4ceae7d7410573973bec8fff240a8df7396439cf51a4229233504923824b0cc0d94a0a6908d0c0e3841cd4d86690270d5977ace857f46e3bf57a0cf6d0efe9ce3a024c007dcca67e91", 0xc1}, {&(0x7f0000000840)="2ef2f58db6f366616c15cda706a1c8603710ae75be647decc7ae972778d33bb76972dc695e717ff74a079f168777618af540522452641062789b9a94d84a7aff0ecdc0865196d01a56f855343ad1685ab4a6eb1bb22e6c46b7cf30049bba0efb1deb6ba149c5037d50ff22f2b599f4c4f30e04bfbbe5b38ebaf4fede8a53af9a237d0c238f29e9625e2c14e2714b38100c98d93731e9d7395771dc7a46d0", 0x9e}, {&(0x7f0000000900)="629a51475a2f31b8357bae17ed2c66c49e84575cf1ea94da9b1c235e72369c1886b4ab71420d6521f3c404d0028880adbeeebdd7721247eb65fc37568d8c8fa8572dae1ddd9bd50a59d8051af4b5e8d59fe5d271dc8afc1ca52e29ff47608d19ace4c56fb17e6ba89d0f2ee9656535e3c7113cdb3f263383e367375835c1cafee5380b4ebd4445a552aaae23cc14c22b321357a44715e7a29107af61f39647555c0126e6034737d02fc4e7afdd0ff213e712ff4b9817fcbf0be40e761fa136766c67db4b19cfcf339f4bddff08", 0xcd}], 0x8, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xa8}}], 0x2, 0x24000004)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)='.\x00', 0x2, 0x2)
sendmsg(r0, &(0x7f0000001ec0)={&(0x7f0000000c80)=@phonet={0x23, 0xff, 0x0, 0x8}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000d00)="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", 0x1000}], 0x1, &(0x7f0000001d40)=[{0x58, 0x110, 0x7719, "faed48934ef31386727bafc9184cae64b7c7d964dea99ff4e02af1ca9d33173b44f33bc3063a29570b698e84b4de61efafc0d9d47b40b931daa2e35b6b14763e18947488"}, {0xf0, 0x101, 0x7f, "a290c24f7e47b443f0f0d489fe90d9dedbab77f0067dadb95390f0aa9fb8ac8e5e6c8cc69481cf71aba059f26608968a228047cf2cfe86404e32e6f134d609620779f1ca0d15ec4f4c12313b6f77f671f4404abd11618fe63453b99eaaa24879422670094d09580596b81b44208f3382f59ffd24441df94b0db1429b138c75eb315526da62910f56a3c4b0ab4706fbc4fe6bcd084a6ced8ce9300d74920c5cca259ca319516319c8166dc7786cfe885e6a29c338366f14a1c5c78c76257aa812fcaf69100861a320d995eb0013a28e3f16661e1087ca45d36f106a"}], 0x148}, 0x4000854)
recvmsg$unix(r0, &(0x7f00000054c0)={&(0x7f0000001f00)=@abs, 0x6e, &(0x7f00000052c0)=[{&(0x7f0000001f80)=""/28, 0x1c}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/199, 0xc7}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/218, 0xda}, {&(0x7f00000041c0)=""/211, 0xd3}, {&(0x7f00000042c0)=""/4096, 0x1000}], 0x7, &(0x7f0000005340)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}], 0x160}, 0x2063)
sendmsg(r4, &(0x7f00000056c0)={&(0x7f0000005500)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005580)="d0f993b527a8ed18e429384415adb3c3062c3672d4a63f8fc91b56e960cc13377455", 0x22}], 0x1, &(0x7f0000005600)=[{0x60, 0xff, 0xffffffff, "63adbfb5a8ae75c0931a3a4918ee1dbddd05ab9099c5773799f1d0e7f46f0345cc30cf55d4e290acff49da57e73c98808d01b49b5735abf7e4f3344ceed708dc544c6ceaedaeac2760a4b4ff"}, {0x30, 0x117, 0x3, "c42b6db493a9b84354119bfe620f1fd8ab23b6bf792683e9eed55ec091e9"}], 0x90}, 0x1000)
r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000005700)='.log\x00', 0x113040, 0x56)
write$bt_hci(r9, &(0x7f0000005740)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc8}}}, 0x6)
r10 = fsopen(&(0x7f0000005780)='ufs\x00', 0x1)
lseek(r10, 0x5, 0x3)
shutdown(r3, 0x0)
accept4$inet6(r5, &(0x7f00000057c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000005800)=0x1c, 0x80800)
r11 = memfd_secret(0x80000)
shutdown(r11, 0x1)
sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000005900)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000058c0)={&(0x7f0000005880)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x23}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000005a00)=[r3, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7], 0x9)

04:10:52 executing program 2:
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0xffffffff)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x7}}, './file0\x00'})
copy_file_range(r0, &(0x7f0000000080)=0x3, r1, &(0x7f0000000100)=0x7, 0x5911, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000280)={0x0, 0x1, [0x4, 0x51b0, 0x9, 0x3, 0x1, 0x7f]})
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000002c0))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r1, @out_args}, './file0\x00'})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1)
ioctl$TCSBRKP(r0, 0x5425, 0x100)
sendfile(r2, r0, &(0x7f0000000340), 0xf2c1272)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000380))
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f00000007c0)={0x3, 0x1, 0x7, 0x17, 0x120, &(0x7f00000003c0)})
truncate(&(0x7f0000000800)='./file0\x00', 0x100000001)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000840))
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x0, 0xb8ae56a48174cd59, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0xc80)
creat(&(0x7f00000009c0)='./file0\x00', 0x100)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000a00))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/crypto\x00', 0x0, 0x0)
ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000ac0)={0x1, &(0x7f0000000a80)=[{}]})

04:10:52 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

04:10:52 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xbbcf40ba3a0a809a, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000180))
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000001c0))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000200)={<r3=>0x0, 0x2, 0x100000001})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={<r4=>0x0, 0x2, 0x0, [0x9, 0x4, 0x6e8, 0x400, 0x1], [0x5, 0x3, 0x31, 0x7, 0x80000001, 0x1, 0x2, 0x3, 0x8, 0xc56, 0x58, 0x6, 0x100, 0x3, 0x2bc7, 0xfffffffffffff99a, 0x81, 0x8000, 0x7, 0x7, 0x101, 0x4, 0x8, 0x4, 0x3, 0x100000000, 0x4f0, 0x38, 0x6, 0xff, 0x4, 0x400, 0x80, 0x5, 0x5, 0x2, 0xc1, 0x1, 0x8000, 0x7, 0x3, 0xff, 0x5, 0x100, 0x6, 0x7c4, 0x7fffffff, 0x7fffffff, 0x8e, 0x3, 0x100000001, 0x6, 0x6, 0x3f, 0x2, 0x10001, 0x78, 0x5d93, 0x1, 0x7, 0x6, 0x10, 0x0, 0xffffffffffff5791, 0x0, 0x9, 0xd1e, 0x0, 0x4, 0x3, 0x0, 0x5, 0x1ff, 0x6, 0x1, 0xf9ff, 0x0, 0x974b, 0x1, 0x3, 0x7, 0x8, 0x10000, 0xfffffffffffff000, 0x8, 0x101, 0x9d9, 0x4, 0x5, 0x7ff, 0x7, 0xffffffffffffffff, 0x2, 0x9, 0x0, 0x2, 0x0, 0x9, 0x6, 0x7ff, 0x1, 0x40, 0x0, 0x19c5, 0x7, 0x59, 0x81, 0x9, 0x1c, 0x7ff, 0xffff, 0x0, 0xffffffff, 0x9, 0x8, 0xfff, 0x8, 0xd9, 0x4ed, 0x6, 0x79]})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x4, 0x5, {0x0, @struct={0x7}, r3, 0x0, 0x1, 0x800, 0x7f, 0xae1, 0x400, @usage=0x9, 0x800, 0x73b0, [0x1f, 0xfffffffffffffffb, 0xdb, 0x9, 0x9, 0x4]}, {0x2, @usage=0x3, 0x0, 0x1, 0x7fffffff, 0x7, 0x9f, 0x3f, 0x4, @struct={0x3, 0xe4000}, 0x1, 0x3e18, [0x0, 0x6, 0xc06, 0x9, 0x100000000, 0x2]}, {0x3, @struct={0x0, 0x8001}, r4, 0xff, 0x5, 0xb69, 0x5, 0x1000, 0x7, @struct={0x100, 0x4}, 0x5, 0x5, [0x8, 0x8000, 0x800, 0x1f, 0x4, 0x8001]}, {0x8001, 0x32, 0xdc8}})
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000f40)={0xf5, 0x101, 0x303, 0x3f, 0x7ff, 0x7fffffff, 0x3})
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000f80))
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x26}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d80)={&(0x7f0000001100)={0x1c50, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0xec, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x3f25, 0x6, 0x8, 0x7, 0x7fff, 0x9, 0x8, 0x1, 0x1, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x6, 0x40, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x20]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x9880, 0x1, 0x8, 0x1]}, @beacon_params=[@NL80211_ATTR_IE={0xa7, 0x2a, [@cf={0x4, 0x6, {0x7f, 0x74, 0x5, 0x6}}, @dsss={0x3, 0x1, 0x9}, @tim={0x5, 0x8d, {0xff, 0x36, 0x7f, "e2a24f2e84ed3a8563cf003ea45347868c8325b9e3acc9cc1a40c83374e669b24f6c8053a044349dece8075260919a958725ea3946c8edc5004ce4e97f2fa4d33d1ff815f68e6416997d5dd7a61fc71fdc9f77928a31ca1505a3272810ba83316d7bdce400e223d877135035e986d038e9f6bd880b5a3407b4e81fbe9178693a7b75c62ecfc62669cb7b"}}, @chsw_timing={0x68, 0x4, {0x0, 0x618a}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8000]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x56}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1b2c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x7dc, 0x91, "5cfabe4cedaa8ac6fd796b71cd4e937a76a761cff4e718fbb298a5cce24686e0af92a4cb0489a13d159a795da9e18be1e1d72118d05c5cf9aaf01930688eaa25f9434442ee35155881dcd5f6bb4c2ca97f1f6c0af78f2866bd8c644ef5e9b58bd3f76e43ec9529e55c4940c8dc92b6ac2e9395dfc92e537ee9d1b539b84ae1debb3013d929d4127eb3c9b3e8a8b91c9a68b693c0b3ac9f57f89e9cef98f8116dc98b9a2069222f4ba49ae0d5c4c11ba165ff0459ce8407a4b675704acae882f160ec77b650ef962317409ee81e474f222710d551bf37991dd7d390564e165b5e2a793a229e556aa8964c0248942a850a826aaf620e2d6d23e17719208e8902dfd5cbc32f41a634603dbda28f02719a3210aff9a2df1ab06538be791fa47a24bbba93d30c5da91d027d8d35548e5c82c29352cbfe36c427cceaf6eb19a242db41e39cb8269bb1dc5fa43fce9400e372ae165f470bb79740b20f210560906ffad3ae9314a010ad6d4560d64c2065cdb240d5e21a3544fe1c0c88ab78c4b61717197c2ed2393310b4e0010e8a98e68217fc1f846488c0938761ea341c542ddd5608837009f4514d42277ce3d7e3b886be12baae741a4f0df66c6a9cafd76329d7b51fc2d7ab7895a4e4442e07fa7b94fe889587148770d321039ef4259ecb421fc7367746bfd7906f8213955b9cb1821d10474a38cc9a088fe61d5d7ad20eba9351852e86f997e119141d56f6c0c216f06d4d16a18e1205f216d181ec9cd0bf9665ad8008598af4b15603683c747c4e7ef3d78402a2c5434f8b36ad7a9787adcaf57b75a021f5421e4d4282668cb8aabef90c24e1cc9095b90525ffe6846e928ecfa8d5ab35b5415e3e2c7a93d3ae24ea717b0f63098829a91fdd06a22e67ebae62d27aae1ebee63c31a6010821a641f8f9f19d47a3958f095ed01a3ff32790a8104063c653bed5eb083ebf2ad8a15987d527f07b008479b300b3e131cdcc6d12920929f161af78f352b5ab658c6919d50548b4a2a0d9cc138db5fa68bf445d73b9b9a9613e5c8351d5cd52ddcd57e7dc887eca37f96b77e76721af85f495c3f0e79be26aa1eec9533480fe323f93295bf8518a87557e9e85cf8a8ea0c1a945085159c5ccf17da9280a566f6a0ae320e2bd7683d2c8902412892994bf8a8ad8ada96c12a6a0f730ebe6d839f60fc10db74d5f2ad7ae4f636500c45ba3f515bb8993c5cf542372c4f5f6c3c88ee8f608c59e7fa2778b4f66a696fca59a384dd3dfa5044e1bc0b2a62c26ac135b318ae9ae41b49e79e4e2e6b22728921bab638182dc96a9c3e25471efad9e9fae40d79a3fbe70886e7debff88fa2a431fbb489b2d35693c908caef1bf14d6ff01969b7fade775235f3660cc857bfd2e701ba3813251341beed6b08dac149c40924e425b5a933e1d3221d1e3e53b09eaa60aaaadf060f988be8947ae9e644af8923d7a54d5ab9510fcb9afe435bed030d596696bdf7bbb283600ea2283cafe92881b56a7ce9dd86e4d3dc59fadc7fe7b0d364c03e71835bc42aa5800a7251e8530700ca7e8f4f3a5de40a987160943520b04c9555e3c7be6246f9068788356bb1c660c0628d7aa675d662864dbc778af655fa88d6d721e87fc028001bcaaff38191686ccc7b72906f0e104023163d427abe2de55df29b754bf6e270133f5a98f1ed455217b8f00787654780e7715ad85241dd36569e7931bbd24bf493db475bd17cedf320ca844cc4519b558109d1a792d688249e1806123421d1c9cfe2b7d054f165d9c7a23ef7bbe8366baec7d2fdc34badeea6c9bf60470f0f6bdec23fb34c347643183175174884202faae52457cc65fab8de6dfd48772ac32a236eb6a35bc3fb03e70282f5ec90fccfdb039c46652cd79ca61874639aca9c116747a1adc49641e298b66e36db6ae213f67c8d5a479c533fc8f84d65e46cc09fdbb960876929f2e254eb0c7023ba30d15380211f77cc6ab1557819d7659db10516f3236e3ba497f8a4be4f6f0508d26928ae53ebec2a4ef347533c9cfa7e711efe9099cca366cf096a23e548e030fd18c01f8504c85348fdfb5415f549be8186d043add3b6d1a259803e98a0ba70d8a66e03a5a10f565a2bfd711f6608cf8bfe27fbdb075aab852308b961eda082404cec426be99b0b398e07810cdb35e12f555688b1dde1c0b541ea8dc2365825cf07fb816671aef0be39167ec53e1013734c10e8452471362df59745b0333bdd378b81e3319da515fc0e390a5431d347a9d79124c7957b59428d35d9fa5785a7e8da7527d65c1e6f4120e8a85eea1f6fd5cc0a4b1c168e2f41a09a72495d218f5b13fbb8bc6dd0dfb0a0da009d8fd0225c691e036949913d36d7ab230f0eab41e7bbd196dae4419074c67a380a0389aa88dcdb7a96b6f2fcf4cd72869d9a710516f28f92d5ca8cfffc24fd21e2479fd9377491058b36db2913ab7b75fa9bdbbc34df4347dea439a16a7930b2270860d270e4710df7274277c3169760118e74190fbf04553e45b58890d315942ebde492f2537c36db5dc6d06d5146f79884407d6206d6a161041fbf070be063cf8e08a41a52d332ed47fe9ce3ef03aabb899fab78f455e28fd80af95abc1d9d67f4551d97076e49c3969f1aefc3a077f2102a19a358af74128ad12937e956e54a41669513c79cb4eb128094a259525dbf977e4f9f70b13e92e87c78d8200e87cac077e4b98e82b25c1831dbd3a7b35cf68a20ccf2376caa59de6668c9dcf01f96a9c947635ef373349f7a83831d8ce86ee57e7bce8f4958d4de53563cbdb5bfec81f741a4e2abe01a3ef47fd2410ff9a20601c0ba9af4c21"}, @NL80211_ATTR_IE={0x111, 0x2a, [@preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x40, 0x81, @device_a, 0x0, "", 0xefc, 0x80000001, 0x6, [{{}, @broadcast, 0xb3}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{}, @device_b, 0xf20}, {{0x1}, @device_a, 0x7f}]}}, @mesh_chsw={0x76, 0x6, {0x0, 0x1f, 0x1f, 0x9}}, @chsw_timing={0x68, 0x4, {0x8, 0x9}}, @tim={0x5, 0x93, {0xe7, 0x68, 0xff, "6d9df430ebbb46bc5dbc28e554447d8ca656f52fda4f6c7300f0d1e01526590ab685dfb0eb520bc51ad8972385e39d8ae6e0bb6203a1d859c3293f8b2013882e2ad5af7aacd8824373183aad6aa100714198bfce0464edd91176e8e1113e7a7a11578aed1b8a98f2ce9427ce826564cd7fe3826ccc4bb49deaff8c89e77a1479a3928cec9403b49496181754c6fb5cb9"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@supported_rates={0x1, 0x1, [{0x6c, 0x1}]}, @sec_chan_ofs={0x3e, 0x1}, @challenge={0x10, 0x1, 0x9c}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x102, 0x80, [@cf={0x4, 0x6, {0x3f, 0x80, 0x7, 0x6}}, @cf={0x4, 0x6, {0x80, 0x3f, 0x200, 0x40}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0x8}}, @measure_req={0x26, 0x79, {0x9, 0x0, 0x1f, "d4debdbc5c5055f0acf8502bae0e84307709fc6e25cd4094827aa4f3a95a682f83c722efa071da532dc6d3015603c06174cc58b3deb150ca616f216a539696fe8e7df531d04049d7d9965dfb6069397cb547d2eb409a988ceff444da2c15b0eecf13b6cb73deeef1c0012555fc373be50437180635f6"}}, @tim={0x5, 0x4a, {0x81, 0xb0, 0x9, "5671a5c08102334051f6a3ce4a31c31474b7be805b8d8f9fd67cf4cdbcf6465b9b5baca305a4b23bbf9dcd48aa0b6158119eef92612e96ddfe88de47447ea4724b4c6029cd361d"}}, @dsss={0x3, 0x1, 0xab}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x0, 0x0, {0x7, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x1, 0x20}}]}, @NL80211_ATTR_PROBE_RESP={0x4b, 0x91, "40a015d3472e662aca308aecda0ef0edba821f974e3cdf1eac2cd642b1509be181c6f3e1f41fde705d55a4b813fa9a0e0df247c465e7df3cedf3be57449e444039a9b9ac83546a"}, @NL80211_ATTR_IE_ASSOC_RESP={0x204, 0x80, [@perr={0x84, 0x108, {0x2, 0x10, [@not_ext={{}, @device_a, 0x1, "", 0x26}, @ext={{}, @broadcast, 0x3, @device_b, 0xe}, @ext={{}, @device_a, 0x1, @device_a, 0xb}, @ext={{}, @device_b, 0x0, @device_a, 0x2f}, @ext={{}, @device_b, 0xfffffffc, @device_a, 0x3}, @ext={{}, @device_a, 0x2288000, @broadcast, 0x8}, @not_ext={{}, @broadcast, 0x80000001, "", 0xe}, @ext={{}, @device_b, 0x344, @broadcast, 0x3a}, @not_ext={{}, @broadcast, 0x5, "", 0x38}, @ext={{}, @broadcast, 0x1, @device_b, 0x29}, @not_ext={{}, @broadcast, 0x0, "", 0xa}, @not_ext={{}, @broadcast, 0x6, "", 0x12}, @ext={{}, @broadcast, 0x7, @broadcast, 0x31}, @not_ext={{}, @device_b, 0xff, "", 0x3e}, @not_ext={{}, @broadcast, 0x8, "", 0x1c}, @ext={{}, @device_b, 0x0, @device_b, 0xb}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x7, @broadcast, 0x4, "", 0xffffffff, 0x2, @device_b, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x7a}, @random_vendor={0xdd, 0x75, "9ebd04e6c0b3a8a89f8bc44b8f544d39451e5a5e5870d0b52c3af3e13d2a3006b4b893ceb9426527f57f9bdaf8abfa047548f86eac1ce9dcbf8b8852f13ed308dcb0426c6a654888d24831aba3c3ea304ac705b95ab98b8e34508c91e2a4d67eeb97ca06390d1dfe2cdc14b322d726aa155dee2771"}, @tim={0x5, 0x30, {0xff, 0x73, 0x30, "e2dd50a3f86a89298c1b9ded0cfb439fc09f42be439d9d1f5533baf0c5377ed9cdd2ed3d48b1545b6f81f4306e"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x3, @random='=wh'}, @random_vendor={0xdd, 0x12, "2223bf63946dfd2794151e064234d5020641"}]}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x166, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x5a, 0x80, [@mic={0x8c, 0x18, {0x446, "e315abf49aba", @long="5ae0d8f15fe5e10d03150affa0c96006"}}, @prep={0x83, 0x25, @ext={{}, 0xe6, 0x81, @broadcast, 0x1f, @device_a, 0x9, 0x56b, @broadcast, 0x9}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0xff, 0x7, 0x1, 0x5}}, @channel_switch={0x25, 0x3, {0x1, 0x2, 0x3f}}]}, @NL80211_ATTR_PROBE_RESP={0x74d, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x167, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x40}}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x81, @device_b, 0x0, @device_a, 0x1, 0x1, @device_a, 0x7}}, @tim={0x5, 0xa1, {0x8, 0x42, 0xa7, "9ae13fceb46c7fe1fd880123d513451c8d220234dd498a5ae2903e7e7aeabceabe271d65c27967d335a08d979824f7aa37f393e9a4dd0acffe21f1737786a35b736ed93b0bfab3e2a11e6c3cc5ddb4bb5039df7f6e10bb347706b5af522cd9fb30a78dffd6bcbb894643ea57774f6bd0f1e1e3a6c2b82c54a842da46e8f06db1f99afb145b61299305e0e88853ecae17c1b612229465c57e63cfeebea2b1"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0xb5}}, @erp={0x2a, 0x1}, @tim={0x5, 0x82, {0x8, 0xcf, 0x3, "41b0e0b8b37418462ee27e0ac13dc19ad462a229f8ae469122199f9a902dcb3f38a8a9c0d4900e4f105ac54f4abeb05d9d9f1eba5d36aa36d1c813108fe6a58e74877130dbbb6ebff4271d341b7bf6e9777b224ae94230aa3a91b72ff8d3979f7acf555893dfc1ce898c199d3a34db213dd8757478370d7189e51a1dfa21bb"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x23, 0x7f, [@cf={0x4, 0x6, {0x3, 0x6, 0x1ff, 0x7}}, @ssid={0x0, 0x5, @random="fa10fe2486"}, @cf={0x4, 0x6, {0x4, 0x1, 0x5e0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x6, 0x80, 0x38, 0x80}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1b4, 0x7f, [@measure_req={0x26, 0xd5, {0x1f, 0x1, 0x0, "faca563232fec23a32789dede227f24a7b4f02f60a036a35c874c9eaefa8b08e212b6c323eba1ea6d8e747d6ea52828db5aaeb27f8a730a066f5a208ec9c5aba057cf5b6d0c8c062349931536a765ea338265ed622b99f1687f8c70d921f1b011e2fdd112cdb77372cd597edc61d162d1facefd63590896d92860799f9d28b42120d67ceec2b7b2ee422e361290f711d05a56a88b639e3df8ec01fb068aef451fc96d1efb0589a879cdc1f44dc577fbfaacfa1ac10ae044b1e48b5c18946bace6e2eef96fa01e95f22cd459eb11e47c68c9b"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x4, @val=0x5e1, @val=0x9, @val="a6556518ecc423ac2aa0613a1e46156b"}}, @ext_channel_switch={0x3c, 0x4, {0x8, 0x0, 0x6c, 0x9}}, @mesh_chsw={0x76, 0x6, {0x7, 0x1, 0x3f, 0xcc1d}}, @perr={0x84, 0xaf, {0x3, 0xb, [@ext={{}, @broadcast, 0xfffffe00, @device_b, 0x4}, @not_ext={{}, @device_a, 0x87ea, "", 0x1e}, @not_ext={{}, @device_a, 0x101, "", 0x42}, @ext={{}, @broadcast, 0x9, @device_a, 0x2b}, @ext={{}, @device_a, 0x400, @device_b, 0x2f}, @ext={{}, @broadcast, 0x10000, @broadcast, 0x7}, @not_ext={{}, @device_a, 0x3b3a, "", 0x16}, @ext={{}, @device_a, 0x80000000, @device_a, 0x14}, @not_ext={{}, @device_a, 0x59b4, "", 0x9}, @not_ext={{}, @device_a, 0x100, "", 0x25}, @not_ext={{}, @broadcast, 0x8000, "", 0x2a}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0xf4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf0, 0x3, "0f52a46b8c23b192d773c164371f5fe55211f92c6fa7a7d45f8d4426945b08c5285da5fcb46e17696365d5525e3ab5133aed6f15a4ffc21a4c91de2f11cb3c25d3ed4118269a41d67de187c1ad2dfb62c15ae1ca4ee64f682ec55433c0725c85fa8e49cb97da97f7e33e7f98f9a2b1067fb6d362efab26abd57576bbd61deb2c20348b748e5febc5e95400414d5d0d7856570100e60f6f52a8eefaa58e03cb926876086d0cea173582920f26654cb0dc6c88878265b7f97e2ffb95ff052f31b0e27ba7066aefc5255d9b75a6cead2bffc8eda3b0796ec555a3e01604171b96cfde257b8011d620db9469003b"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x120, 0x80, [@peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0xa, @val="9832a7dec1d35a231eb27c36958fa9d5"}}, @supported_rates={0x1, 0x5, [{0x6c, 0x1}, {0x6c}, {0x6}, {0x63, 0x1}, {0x6c}]}, @random_vendor={0xdd, 0x3b, "6a0d98ac8686fc2829a92cda54a03a8595dd46761534ccb656af9cdb12a37529021df40b4f12ef86fa59e0cd06ede294215497c2fc73454edb190e"}, @peer_mgmt={0x75, 0x18, {0x1, 0x7, @val=0x3, @val=0x1a, @val="6420eca7c2c6e7c31bd88ea20b006a56"}}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x1}, 0x5, 0x4, 0x1000, @device_a, 0x2, "", 0xffffffff, 0x8001, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{}, @device_b, 0x259}, {{}, @device_a, 0x7ff}, {{}, @device_a, 0xfff}, {{0x1}, @broadcast, 0xe0f60000}]}}, @erp={0x2a, 0x1}, @random_vendor={0xdd, 0x31, "3a08532d5b5bb66ed0c0365c6663e23ad9fae42d9e301c2c01fa16c8b7b0167232980a122d3c18d988f2994212b681626d"}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x8}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0x2c, 0x81}}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0xff, 0x40, @broadcast, 0x3ff, @broadcast, 0xe01, 0x8001, @broadcast, 0x3f}}, @ssid={0x0, 0xc, @random="1555cbc931c78edfa692e07b"}, @mesh_chsw={0x76, 0x6, {0x3, 0x7, 0x2f, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x8, 0x40, 0x0, 0x401, 0x5, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xe49a, 0x3ff, 0x6, 0xff]}]}]}, 0x1c50}}, 0x8000)
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000002e00))
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x44, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xca1bf1e70b99ed4c}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000002f80), 0x0, 0x0)
io_setup(0x5, &(0x7f0000002fc0)=<r6=>0x0)
io_cancel(r6, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x1, 0x200, r2, &(0x7f0000003000)="8ce1dfacafe3f239d030a8e2a3aaf78659d298f82ebf5c49120f04227956f7c2a326388174395b135a3372c2c83010634b6d25c2f49eeec0c9b591fbd647d100ff5e7dbc269d122f2695cc474891047399b17fe0e36aa713dd4fd7d1c52e69321c5d5d9de1c4f9223ebf958d359dd352aa58069977ff0351ea486a4b6b010813f668e40d9700c4e90d55abb9f57ea135c7", 0x91, 0x7, 0x0, 0xfae149607498c929, r0}, &(0x7f0000003100))

[   93.095200] audit: type=1400 audit(1768363852.778:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:10:52 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00')
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xcba1, 0x2)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x8000)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x80, 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='net/udplite\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000240)="735dff33937f6da66a37efcd70bb74bbd9d342b836ebcf0c76ee0a7e2257ddd4923f9ae2de5a94be6c29fc247a9f64db6f0ea39c3e1012699a39dfdd6567")
setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)="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", 0xfd, 0x1)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x8440, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', <r5=>r3, 0x4, 0x55, 0x80, 0x7, 0x12, @local, @private1, 0x7800, 0x700, 0x6, 0x401}})
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0xc, <r6=>r5, 0x32}, @l2tp={0x2, 0x0, @multicast2, 0x2}, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x81, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000500)='macvlan0\x00', 0x2, 0x20, 0x7})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/bus/snd_seq', 0x880, 0x9c)
setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000600)=0x63, 0x2)
r8 = syz_mount_image$nfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000880)=[{&(0x7f00000006c0)="f1f7e0b986e4300a1c71ebcc5e619f4f766eb8ef67c65a29add54ab39c8dbd91cf0be4074ebc3f0f0dbae9dc25403b7e62c5cd6bbaf85b79da39ef1b868951a588367caa0b32d40f1ef9b294a864f5f88b295c409fd3f9cb6a83728691908a53f34a75b4695c303a4d8e488228db2cb0b3684f7c0d903a9639d65a7ac2b4e2bd2505a8456e5ee1129adc8d60f3e3dba2d2a822856718d56acf3323fa5736bc1126af0098f114d758c093d0139dbad9e580d0a453030a49909ebc23e768c0988818cc45af6228469458f23c215c5652", 0xcf, 0x4}, {&(0x7f00000007c0)="ee2e82cb1a86c27d9faf36b0fa92b75aa5dbe894fbdbedac0b1cd6985acf3778b91a60be18f2b0b982c78660e2b3b2efb23481b95fa7364795e2227921591c9a7f8538d15205a3154589871fca99f3517b9af3328cd463ac49832f61b431d0102760b995244fc2e7457604ebbe1c373500add56ba628fc756c60e0b25f669d84a092f9c041b45ade3585fb5c27d90c8229a5fcdaee7cc3dff157c49d98fe60fafc43b9f2c4bb4debc937a44be08ea19c9b670f665265a8105f", 0xb9, 0x200}], 0xc000, &(0x7f00000008c0)={[{'user.incfs.metadata\x00'}, {'{'}], [{@subj_type={'subj_type', 0x3d, '/dev/full\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '.'}}, {@obj_type={'obj_type', 0x3d, ')-\x83'}}, {@obj_type={'obj_type', 0x3d, 'batadv0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/full\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
r9 = signalfd4(r8, &(0x7f0000000980)={[0x400]}, 0x8, 0x80000)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r9)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r10, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)

04:10:52 executing program 7:
r0 = fork()
r1 = syz_open_procfs(r0, &(0x7f0000000000)='oom_score_adj\x00')
r2 = signalfd(r1, &(0x7f0000000040)={[0x2]}, 0x8)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x3)
r3 = openat$cgroup_freezer_state(r2, &(0x7f00000003c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r4=>r3, @in_args={0x1}}, './file0\x00'})
r5 = memfd_secret(0x80000)
ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000480)={0x5, 0x8, '\x00', 0x0, &(0x7f0000000440)=[0x0]})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0xd02, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x8041)
io_setup(0x8001, &(0x7f00000005c0)=<r6=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r7=>r5, {0xee00, 0xee01}}, './file0\x00'})
io_submit(r6, 0x1, &(0x7f0000000740)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0xff, r2, &(0x7f0000000600)="9389e07d528b9b0c7e4e74eefa553ba27a4b634fe6dd61e96878432c0c07fcf12b2c270b1315afcd652e51b49d9abe83341dad5738e74c34e527c881c31456f9081fccb50151eb3e4bfbe29e5939cd11722e7db8f8bb9c0be10026596f9d8c3ee46c128e9abdc0536e64bd27eaf50d4df820bb1df7edae210b6c29d2dc49051d0286820a662644ffd5e76f7e63f1968a11b83caf13b75e981c9b07f4fee60cbb3039573a", 0xa4, 0x9, 0x0, 0x3, r7}])
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000840)={&(0x7f0000000780)=""/137, 0x89})
r8 = getpid()
tgkill(r0, r8, 0x3e)
r9 = epoll_create1(0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r11 = openat$cgroup_type(r2, &(0x7f0000000c00), 0x2, 0x0)
io_submit(r6, 0x5, &(0x7f0000000e00)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x5, r9, &(0x7f0000000880)="4ef81992537ac2e75be63b7085c97cd7ebe68bd52e2f5363795c1133bdc1c3498fac707d29cb6dcf58d0a4ae848b854c64af6010e54d5708ab41f51d071bf72fb667d19791b13a12dfeb9f0e1f243901f839a5f2630304281119c4404f8e041e4e7daa62390f9b7aaadffd17583f8a6d3db72f2a3cf85a1c007f5310cc883486dbb31d90cb51975fe85463e3a886ef44cea620e348b569f4c65d6bdd07189c7a610b24a8e1d082aee9813d1dd15f0b6be6d9f1d36277d0e93602f6adc4810f40708aa71cfe970c7ccbe1b799ee4cf08cd3a1150989ea3db5", 0xd8, 0xc0b, 0x0, 0x2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x4, 0x7, r5, &(0x7f00000009c0)="66ea799206cbaace25060c6c7fac7b58effe4ddfc397fc3b6379942c919d5fa995a2dfe2b282c23e2715e2f16bbf669305189d54681058dbf7e3d349f1b115e33dd61e5e3913fd1a7a75a3738408424ae065117a91086d5b96000f79aad26e4c244b47100e4fcbf6d949f172d4dd8275e0a651e5a71c928f9d8b80e3d2ea45cda2839d334f468202c0bc5541d49e9b40700600a75d923676b529b8467837367b8e430157e6fa44bc5419b9dff9adf05a657e0a426f1f7fa1ca145e72102a2764be507ba0c82617523e8716e45a52b89ca19b4e26eff64d9b584e751582b51a9c797a", 0xe2, 0x2, 0x0, 0x2, r1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x9, r10, &(0x7f0000000b40)="1d450769bb5f52807e2a12b57704e77c82ab3e3348de995f871b2eb0586990427e4d06fc916789b8aa2ca19ff6645841e2dcced5cdb345dceddb452bd7ca99bd59cebedd79f1665c2f49b33895ad59c223ad4ec930a526ad80f6d49edb1c7c1becbf92da51423ef85182ba2ad97d8be74603ae3789bf53f2517b639b", 0x7c, 0x9, 0x0, 0x1}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8, 0x6, r11, &(0x7f0000000c40)="3f39ce2992d0e90936a54a7665fe5e533ba8b327a6c87b02dc7bbec4a6a4df8471ad07970d2d37c8a207219167f8b903f60fea16b95999bd63859d4a62fc0420e5d36f01d54ce4e668c0a474d99a4e305cf21dd28aed9d1155207a795c425740a05e6d4833ebc718993d4c71d242", 0x6e, 0x1f1a, 0x0, 0x0, r4}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0x1f, r5, &(0x7f0000000d00)="9ed51bc2a22806c3afa987c033a5ad102791c2442bc324788d0280fed2dcdbc40c2894fb3885bbaa8a2caa3a523e1d557e337efb5fce6e81d1016625306411e94d30f21bdf50575b892f6d939ce4029047d856fee0a7503f89e531a62c7a04768181057afcb1cc5509b73ba57d513617fe6a1d3d49314e3a3513181a05a5c78bab85f1c74ba57ae5cb453ea88a9a6548a91e4162da", 0x95, 0x800, 0x0, 0x2, r7}])

04:10:52 executing program 6:
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200850, &(0x7f0000000080)={[{@huge_never}], [{@dont_appraise}, {@audit}, {@obj_user={'obj_user', 0x3d, '@&'}}, {@measure}, {@obj_user={'obj_user', 0x3d, '*%['}}]})
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nfsfs\x00')
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000240)={0x1, 0x8001})
recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, &(0x7f0000000400)=""/154, 0x9a}, 0x40)
r5 = creat(&(0x7f0000000500)='./file0\x00', 0x4)
r6 = fcntl$dupfd(r3, 0x0, r1)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @adiantum, 0x3, '\x00', @auto="b79bd304a53676b5120b255a9a25223d"})
r7 = openat(r5, &(0x7f0000000580)='./file0\x00', 0x40000, 0x40)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)={0x40000005})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000600)={0x68, 0x29, 0x2, {0x3, [{{0x40, 0x3, 0x7}, 0x1, 0x8, 0x7, './file0'}, {{0x0, 0x0, 0x7}, 0xb30, 0x0, 0x7, './file0'}, {{0x1, 0x3, 0x3}, 0xffffffffffffffff, 0x9, 0x7, './file0'}]}}, 0x68)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, &(0x7f0000000680))
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628)
fsetxattr$security_ima(r4, &(0x7f00000006c0), &(0x7f0000000700)=@v2={0x0, 0x2, 0x8, 0x4, 0x9e, "458dbb2d9eedbde44d9c2ba82b1b4023abe90169d9756f80b015f2b83a6d27d74263382f21d08a30c6c8a962775fa226956fb87ff4b7ad6e667129e4559b1655ca4504343eac24daba72f81f4537272c484686f5ff1ed82dab1825ae5b49b48524ba41828ddadbdf88d45e3ec45674ea4cfe0899021276fd0044fb76c321b9a0c0996684227e127421d963a17d570add9b6bf90ee8e8fe05a438f3ea6e48"}, 0xa7, 0x3)
fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000007c0)=0x5)

[   94.262679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.265033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.266668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.269652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.271236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.273552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.275183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.277175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.280695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.283232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.285995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.290606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.298755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.309179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.316153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.335871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.343722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.346173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.351736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.353866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.355498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.358070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.360905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.367773] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   94.370886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   94.372752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.376587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.387545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.394363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.395592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   94.398626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   94.399802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   94.401482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   94.410703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   94.427139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   94.482496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   94.495035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   94.501102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   94.510027] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   94.516618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   96.344826] Bluetooth: hci2: command tx timeout
[   96.407404] Bluetooth: hci1: command tx timeout
[   96.407453] Bluetooth: hci0: command tx timeout
[   96.408094] Bluetooth: hci3: command tx timeout
[   96.471516] Bluetooth: hci4: command tx timeout
[   96.472541] Bluetooth: hci5: command tx timeout
[   96.535785] Bluetooth: hci6: command tx timeout
[   96.536821] Bluetooth: hci7: command tx timeout
[   98.391774] Bluetooth: hci2: command tx timeout
[   98.455548] Bluetooth: hci3: command tx timeout
[   98.455979] Bluetooth: hci1: command tx timeout
[   98.456416] Bluetooth: hci0: command tx timeout
[   98.519438] Bluetooth: hci4: command tx timeout
[   98.519846] Bluetooth: hci5: command tx timeout
[   98.583728] Bluetooth: hci6: command tx timeout
[   98.584150] Bluetooth: hci7: command tx timeout
[  100.442406] Bluetooth: hci2: command tx timeout
[  100.503390] Bluetooth: hci1: command tx timeout
[  100.503814] Bluetooth: hci3: command tx timeout
[  100.504200] Bluetooth: hci0: command tx timeout
[  100.569334] Bluetooth: hci5: command tx timeout
[  100.569746] Bluetooth: hci4: command tx timeout
[  100.633333] Bluetooth: hci7: command tx timeout
[  100.633753] Bluetooth: hci6: command tx timeout
[  102.488269] Bluetooth: hci2: command tx timeout
[  102.552388] Bluetooth: hci0: command tx timeout
[  102.552811] Bluetooth: hci3: command tx timeout
[  102.553190] Bluetooth: hci1: command tx timeout
[  102.616121] Bluetooth: hci4: command tx timeout
[  102.616189] Bluetooth: hci5: command tx timeout
[  102.680446] Bluetooth: hci6: command tx timeout
[  102.680872] Bluetooth: hci7: command tx timeout
[  125.843445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.844094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.996668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.997333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.532792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.533427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.702166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.704342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.813973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.814605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
04:11:26 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

[  126.969175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.970950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
04:11:26 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

04:11:26 executing program 1:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

04:11:27 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

[  127.424699] =======================================================
[  127.424699] WARNING: The mand mount option has been deprecated and
[  127.424699]          and is ignored by this kernel. Remove the mand
[  127.424699]          option from the mount to silence this warning.
[  127.424699] =======================================================
[  127.437428] tmpfs: Unknown parameter 'dont_appraise'
04:11:27 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x6, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="00009c2f81cf88aa82db9ec228c54cffff"])
pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)="ff6e1030bd75a3effc11ba5b015e2f5fb9630bbec40fc764dca160579d46290672e4eb0b3046e71b6e694f49078f80185ceedb5e225cec294fa397b3506fae2267e40c21963bd46c66e3379e8450da1910d17537e405318564d5f5025b38cc8ffb102e82be714f7cdb", 0x69}, {&(0x7f0000000440)="4efa65e6f0fd682e121b24fb1bbc61d327a4ddf3fcdbf0a8c5368672c3127ce2a5de387e3033a39ca061aa4ce720b7abb334799e01ac3015e4904094cf56496d5d2e13d957835681fd63d317dadb37169a58509999d2e682dafe11b87e802e317745fc657d111fd868975077aae42eb962a6362d0a", 0x75}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {&(0x7f0000000540)="ca38b5ca389be6e8114a6fa31b4c0df8c308bb7119c2ea20184ac20d7f27d5c061d976175ede3e9c05bb1967f32839f10ff5ea796c314fe6e491e2cd6d0c1fa43275de3a5cdc4d2d2e8dd6216bfcd4e86ee3a0b97b4b412d9537f46af61f0ee21ee0f044c90df4026ab00e38f889dde7508bbf9ca3e363ccd7a347c6fa", 0x7d}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1469639227c8847b2f3aa6ac8d0989f2e22b5c4998099314c148c9de61ae32f373ff0177190d37e7da0c9b7cef0388a2200f11c74553b", 0x6b}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97183602ca50ecd89c90084aef4fa6dc3570fc4593cd7b8186e3bf121a99066753184352be2da849fc639d1b719517c6e2495d86b59340b378305ce677d2a573cdf544cb882944ed7dfd749d4cda2ccb2b1525416d438cfeb35db45c28a974ec", 0xab}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x5, 0x1, 0x3f, 0x9c, 0x8001})
sendfile(r0, r2, 0x0, 0xfdef)

[  127.574454] audit: type=1400 audit(1768363887.255:8): avc:  denied  { open } for  pid=3872 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  127.584516] audit: type=1400 audit(1768363887.255:9): avc:  denied  { kernel } for  pid=3872 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  127.646635] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
04:11:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r1, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
io_submit(0x0, 0x5, &(0x7f0000000700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000340)="126e84f7ed3851b76030006f5d45a3a3daf38c14bf5734f4629ea06fb669718955a05549d05a8b42b9e68757968064c0b92287803c5d453c22032390806d4d4b446140acd490778d25df715a1190c8ebd8c560253ca4825a7c5a21cd35e5c25ca4245d9df0b7d722fd630f33e861750bc7968282bb1fb0895e63794406c96cdc2c27e0218cc807cf7529552dc6d7ec7dc0db38968883270dce9fcc58ef213f35b6f988abb2f332522f2d2e35555469759e4303d032e0d4affdb936069a323bbfcbdca292c9c085017c112a7169b45261db842267ff72906b", 0xd8, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000480)="0f2c23ca3a113f8e1d17f3533408324bd224a7d1a2b5092a3c65225683aab3ef3344a25c11028978f034f55f7ee4319226886df72c9be615f7d64c13", 0x3c, 0x4, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000000b00)="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", 0x1000, 0x51, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x400, r1, &(0x7f00000005c0)="be563bc52260fd856368205abef35d70a526297e61c65e65722acbc3663c2b1677f9b503f1bdffc441b314988a78442355d723a6a70a0fc6e69ce9a2cb6f1511edfca8fd2ff93eee2b4fc48f6a1e6c44d6b8d19cf0b11a5579562d609fb90bae7ce2", 0x62, 0x81, 0x0, 0x2, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000680)="ca4bd7ad1fdd51f70d5199e7711672e40d5f33", 0x13, 0x9, 0x0, 0x3, r0}])
ftruncate(r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x4}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x0, 0xffff8675}, 0x0, 0xffffffffffffffff, r0, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r4, &(0x7f0000000900)="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", 0x200)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e)
r6 = syz_io_uring_complete(0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc2}})
fcntl$setstatus(r4, 0x4, 0x44000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000f684f70a69f84131ac20e9cc21966de4758d0d02152a8200000098672c409d122c295e1ede3732af5500ce8ee42050d3dbbee975ac4fdb4da6b01f9ed985171bfd736644f9e2a5c94cd79ee04d52f92e482e055e69f797693678982e6eabba526454f6709da5a855adb18302e2bd924484b4225014e0f16fc0be9fec2ad474dc65281c000000", @ANYRES32=r4, @ANYBLOB="4b0e0000040000002e2f66696c653000"])
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendfile(r4, r5, 0x0, 0xfdef)

04:11:27 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))

[  128.129153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.130299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.146345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.146967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.155488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.156061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.261759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.263628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.347234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.348535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.417584] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.462881] syz-executor.6 (3873) used greatest stack depth: 24584 bytes left
[  128.491446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.492085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
04:11:28 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x6, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="00009c2f81cf88aa82db9ec228c54cffff"])
pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)="ff6e1030bd75a3effc11ba5b015e2f5fb9630bbec40fc764dca160579d46290672e4eb0b3046e71b6e694f49078f80185ceedb5e225cec294fa397b3506fae2267e40c21963bd46c66e3379e8450da1910d17537e405318564d5f5025b38cc8ffb102e82be714f7cdb", 0x69}, {&(0x7f0000000440)="4efa65e6f0fd682e121b24fb1bbc61d327a4ddf3fcdbf0a8c5368672c3127ce2a5de387e3033a39ca061aa4ce720b7abb334799e01ac3015e4904094cf56496d5d2e13d957835681fd63d317dadb37169a58509999d2e682dafe11b87e802e317745fc657d111fd868975077aae42eb962a6362d0a", 0x75}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {&(0x7f0000000540)="ca38b5ca389be6e8114a6fa31b4c0df8c308bb7119c2ea20184ac20d7f27d5c061d976175ede3e9c05bb1967f32839f10ff5ea796c314fe6e491e2cd6d0c1fa43275de3a5cdc4d2d2e8dd6216bfcd4e86ee3a0b97b4b412d9537f46af61f0ee21ee0f044c90df4026ab00e38f889dde7508bbf9ca3e363ccd7a347c6fa", 0x7d}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1469639227c8847b2f3aa6ac8d0989f2e22b5c4998099314c148c9de61ae32f373ff0177190d37e7da0c9b7cef0388a2200f11c74553b", 0x6b}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97183602ca50ecd89c90084aef4fa6dc3570fc4593cd7b8186e3bf121a99066753184352be2da849fc639d1b719517c6e2495d86b59340b378305ce677d2a573cdf544cb882944ed7dfd749d4cda2ccb2b1525416d438cfeb35db45c28a974ec", 0xab}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="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", 0x200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x5, 0x1, 0x3f, 0x9c, 0x8001})
sendfile(r0, r2, 0x0, 0xfdef)

[  128.591634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.592185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.620855] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.667077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.667774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.088017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.089087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.173815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.174907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.344847] loop5: detected capacity change from 0 to 2
[  129.347171] nfs: Unknown parameter 'user.incfs.metadata'
[  129.408607] loop5: detected capacity change from 0 to 2
[  129.409711] nfs: Unknown parameter 'user.incfs.metadata'
04:11:38 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1045c82, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000868, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setuid(r1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setuid(r2)
r3 = open_tree(r0, &(0x7f00000002c0)='./file0/file0\x00', 0x801)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r4, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
r5 = syz_open_dev$vcsa(&(0x7f0000000f40), 0x0, 0x595102)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee00, <r7=>0xee01}}, './file0\x00'})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000002000500", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="040001000000000008000200", @ANYRES32=r7, @ANYBLOB="0000f8171f1d000007f4a5e12eb6b095"], 0x5c, 0x1)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=<r8=>0x0)
setuid(r8)

04:11:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
io_setup(0x3, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="fa", 0x1}])
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0c0583b, &(0x7f00000000c0)={0x19})
r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0c0583b, &(0x7f00000000c0)={0x19})
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
io_submit(r3, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x800, r0, &(0x7f0000000100)="d4e635fe6ed07de3c657d2fd9d8d65e56aa3e7d278e171eaf2250578c7d6622287a7dcc13fb5f086f8d69a7f30429a13928f7ca77253f2a3a11f4f6f0b14bc6a88aa62cc558b6d59f41c6f667fae53", 0x4f, 0x3d0b, 0x0, 0x3, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x100, r5, &(0x7f0000000240)="32c59204ba3a4b8239d98658a3fe5c7f4b155b21a3d80e801681132b96", 0x1d, 0x7, 0x0, 0x3, r6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1f1, r7, &(0x7f00000002c0)="dbf176dde675c9212505e10a2046b3212a83a9f8e85e0ae424ad61d1d5a3409aac87", 0x22, 0x80, 0x0, 0x2}])
sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="140000000000000001000000010000003ec7aeeae725136545abbb668756d68111a0d898163a308f44f15a1a118aea9c4bf5648fe74ae6fd4006066c4e8d72e9807561df8986e9070766fc1a19bf6fad839ebf02a556a21f179cc7c6bdff5f5105fb3c8399508d19fb9366f76e76381835f4e539f92b2898b4dbedddcf5ffd19b4bef64a5f3a21cd9eaea41d45453180", @ANYRES32=r0, @ANYBLOB="10000000"], 0x18}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380))

04:11:38 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))

04:11:38 executing program 2:
clock_gettime(0x0, &(0x7f0000008480)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000008240)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x9, &(0x7f00000015c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001680), 0x6e, &(0x7f0000001700)}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)=""/189, 0xbd}, {&(0x7f0000001800)}], 0x2, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001a00)=""/233, 0xe9}, {&(0x7f0000001b00)=""/186, 0xba}, {&(0x7f0000001bc0)=""/54, 0x36}], 0x3}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000003280)=[{&(0x7f0000001cc0)=""/32, 0x20}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/35, 0x23}, {&(0x7f0000002d40)=""/77, 0x4d}, {&(0x7f0000002dc0)=""/155, 0x9b}, {&(0x7f0000002e80)=""/33, 0x21}, {&(0x7f0000002ec0)=""/222, 0xde}, {&(0x7f0000002fc0)=""/199, 0xc7}, {&(0x7f00000030c0)=""/233, 0xe9}, {&(0x7f00000031c0)=""/177, 0xb1}], 0xa, &(0x7f0000003340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f00000033c0)=""/149, 0x95}, {&(0x7f0000003480)=""/129, 0x81}, {&(0x7f0000003540)=""/204, 0xcc}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/191, 0xbf}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000005780), 0x6e, &(0x7f0000006b00)=[{&(0x7f0000005800)=""/22, 0x16}, {&(0x7f0000005840)=""/133, 0x85}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/142, 0x8e}, {&(0x7f0000006a40)=""/86, 0x56}, {&(0x7f0000006ac0)=""/17, 0x11}], 0x7, &(0x7f0000006b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000006c40)}}, {{&(0x7f0000006c80), 0x6e, &(0x7f0000008100)=[{&(0x7f0000006d00)=""/218, 0xda}, {&(0x7f0000006e00)=""/146, 0x92}, {&(0x7f0000006ec0)=""/212, 0xd4}, {&(0x7f0000006fc0)=""/237, 0xed}, {&(0x7f00000070c0)=""/37, 0x25}, {&(0x7f0000007100)=""/4096, 0x1000}], 0x6, &(0x7f0000008180)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x9, 0x40002101, &(0x7f00000084c0)={r0, r1+60000000})
setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000008500)=0x1ff, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
close(r3)

04:11:38 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x1cb, 0x4afa7f8b}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x1ff)
shutdown(0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x600}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:11:38 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x1a890, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)}, {&(0x7f0000000380)="e6b11dab9605361aa6b119381bf955564f7bd15284e6b3cf4e2c4abf", 0x1c}], 0x2}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x2d9c2bd3, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x5, @remote, 0x100009c}, 0x1c)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200000, 0x1b0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890)
r1 = syz_open_dev$vcsn(&(0x7f0000000400), 0x8, 0x115000)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff9}, 0x1c)
shutdown(r0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x10e, 0x4, 0x3, 0x37f375f, 0x7}, 0x14)
clone3(&(0x7f0000000100)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x38}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:11:38 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x6, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="00009c2f81cf88aa82db9ec228c54cffff"])
pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)="ff6e1030bd75a3effc11ba5b015e2f5fb9630bbec40fc764dca160579d46290672e4eb0b3046e71b6e694f49078f80185ceedb5e225cec294fa397b3506fae2267e40c21963bd46c66e3379e8450da1910d17537e405318564d5f5025b38cc8ffb102e82be714f7cdb", 0x69}, {&(0x7f0000000440)="4efa65e6f0fd682e121b24fb1bbc61d327a4ddf3fcdbf0a8c5368672c3127ce2a5de387e3033a39ca061aa4ce720b7abb334799e01ac3015e4904094cf56496d5d2e13d957835681fd63d317dadb37169a58509999d2e682dafe11b87e802e317745fc657d111fd868975077aae42eb962a6362d0a", 0x75}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {&(0x7f0000000540)="ca38b5ca389be6e8114a6fa31b4c0df8c308bb7119c2ea20184ac20d7f27d5c061d976175ede3e9c05bb1967f32839f10ff5ea796c314fe6e491e2cd6d0c1fa43275de3a5cdc4d2d2e8dd6216bfcd4e86ee3a0b97b4b412d9537f46af61f0ee21ee0f044c90df4026ab00e38f889dde7508bbf9ca3e363ccd7a347c6fa", 0x7d}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1469639227c8847b2f3aa6ac8d0989f2e22b5c4998099314c148c9de61ae32f373ff0177190d37e7da0c9b7cef0388a2200f11c74553b", 0x6b}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97183602ca50ecd89c90084aef4fa6dc3570fc4593cd7b8186e3bf121a99066753184352be2da849fc639d1b719517c6e2495d86b59340b378305ce677d2a573cdf544cb882944ed7dfd749d4cda2ccb2b1525416d438cfeb35db45c28a974ec", 0xab}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x5, 0x1, 0x3f, 0x9c, 0x8001})
sendfile(r0, r2, 0x0, 0xfdef)

04:11:38 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
open$dir(&(0x7f0000000000)='.\x00', 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0/file0\x00'})
inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x1000044)
sendfile(r1, r2, 0x0, 0x40000014100)

04:11:38 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x80045440, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7, 0x3, 0x0, 0x8, 0x0, 0x475b, 0x4b6383f04ba14be0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5f, 0x2, @perf_config_ext={0x4, 0x9}, 0x200, 0x0, 0x200, 0x9, 0x80, 0x8, 0x1, 0x0, 0x1ff, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x0)

[  138.563134] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.635303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  138.649745] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.755666] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
04:11:38 executing program 1:
r0 = io_uring_setup(0x1ff, &(0x7f0000000000))
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2000000)
fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "3e3ef3a999269f17d917ab02da4baeca5045a289"}, 0x15, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x15, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)

04:11:38 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x1cb, 0x4afa7f8b}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x1ff)
shutdown(0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x600}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:11:38 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = syz_io_uring_setup(0x33ba, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000000040))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x308a0000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xc8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x30}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfff}, @NL80211_ATTR_VENDOR_DATA={0x88, 0xc5, "da38682d4306acb6a620827199a5b77f7c006e45bbce4a129a992f69a7cc68dee420f27bcf1aec67032e4a6059d99008eac2c6174583d7ffffb5ed8b15193323839bb94b35b2b09aa2d4d8a8392f5cfe0bc7da6bc7de45e2e71f4c5eee8f949c00a855d4f9d5b121c7250cff9b21ab1570cb0d05c5db859ad962729f6b5c1970248b7e96"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4001)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800)
r4 = dup(r1)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x13, &(0x7f00000001c0), 0x2)

[  138.873688] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
04:11:38 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))

[  138.967250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  138.977472] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
04:11:38 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x4000)
memfd_create(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
r2 = dup(r0)
ioctl$SG_IO(r2, 0x2282, &(0x7f0000000e40)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x3d, &(0x7f0000000e00)=""/61}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

04:11:38 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/191)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
write$evdev(r1, &(0x7f0000000000)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x4, 0x2fa, 0x5}], 0x30)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'})

[  139.110133] audit: type=1400 audit(1768363898.792:10): avc:  denied  { write } for  pid=4013 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  139.151432] syz-executor.0 (3984) used greatest stack depth: 24240 bytes left
04:11:47 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xa)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom(r3, &(0x7f0000000400)=""/108, 0x6c, 0x0, &(0x7f0000000100)=@llc={0x1a, 0x325, 0x3f, 0x1, 0x8, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = accept4(r4, 0x0, &(0x7f0000000180), 0x80000)
r6 = syz_open_procfs$userns(0x0, &(0x7f0000000200))
mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x0, &(0x7f0000000240)={0x0, 0x100000, 0xc0000, {r6}}, 0x20)
getcwd(&(0x7f0000000280)=""/28, 0x1c)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="677c52aed1ae64e424f3092da9876a74dc67780995b847b75594c7990ae9837d8d4e10739d31ecccc32a6bf164b0f9d89cb8b0f61a75af4bdaf2cfbaa724ffde830db235814362779da4cb6cfaf2239d0c378cc9cc97c160d757b410fbbd5537b9fa691a778d4756b547313c4552765b47c000010000450a09", @ANYRES16=r5, @ANYBLOB="040025bd7000fbdbdf2504000000058ebcc7aa5d38670006000700000008"], 0x24}}, 0x4001)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7)
keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x1})

04:11:47 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x1, 0xc14e, 0x1, @private1, @remote, 0x700, 0x40, 0x7}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0)

04:11:47 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x1)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x4000013, r0, 0x20)
pread64(r0, &(0x7f0000000080)=""/38, 0x26, 0x0)

04:11:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x4a}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{0x4a}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20040000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r8)
sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r10, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555550201}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0)

04:11:47 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xfff, &(0x7f0000000040))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/8250_mid', 0x0, 0x4)
read(r2, &(0x7f0000000300)=""/102400, 0x19000)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99)
io_submit(0x0, 0x2000000000000193, &(0x7f0000000240))
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)

04:11:47 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x2, 0x6, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x2e, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="00009c2f81cf88aa82db9ec228c54cffff"])
pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)="ff6e1030bd75a3effc11ba5b015e2f5fb9630bbec40fc764dca160579d46290672e4eb0b3046e71b6e694f49078f80185ceedb5e225cec294fa397b3506fae2267e40c21963bd46c66e3379e8450da1910d17537e405318564d5f5025b38cc8ffb102e82be714f7cdb", 0x69}, {&(0x7f0000000440)="4efa65e6f0fd682e121b24fb1bbc61d327a4ddf3fcdbf0a8c5368672c3127ce2a5de387e3033a39ca061aa4ce720b7abb334799e01ac3015e4904094cf56496d5d2e13d957835681fd63d317dadb37169a58509999d2e682dafe11b87e802e317745fc657d111fd868975077aae42eb962a6362d0a", 0x75}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {&(0x7f0000000540)="ca38b5ca389be6e8114a6fa31b4c0df8c308bb7119c2ea20184ac20d7f27d5c061d976175ede3e9c05bb1967f32839f10ff5ea796c314fe6e491e2cd6d0c1fa43275de3a5cdc4d2d2e8dd6216bfcd4e86ee3a0b97b4b412d9537f46af61f0ee21ee0f044c90df4026ab00e38f889dde7508bbf9ca3e363ccd7a347c6fa", 0x7d}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1469639227c8847b2f3aa6ac8d0989f2e22b5c4998099314c148c9de61ae32f373ff0177190d37e7da0c9b7cef0388a2200f11c74553b", 0x6b}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97183602ca50ecd89c90084aef4fa6dc3570fc4593cd7b8186e3bf121a99066753184352be2da849fc639d1b719517c6e2495d86b59340b378305ce677d2a573cdf544cb882944ed7dfd749d4cda2ccb2b1525416d438cfeb35db45c28a974ec", 0xab}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x5, 0x1, 0x3f, 0x9c, 0x8001})
sendfile(r0, r2, 0x0, 0xfdef)

04:11:47 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010007deb70325132510000eb70325103", 0x5b, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010007deb70325132510000eb7032510300000000002e2e20202020202020202010007deb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46", 0x61, 0x11400}], 0x40a0, &(0x7f0000000180)=ANY=[@ANYBLOB="ca4e2b23c424020af3ba89"])
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x40, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200)

04:11:47 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
close_range(r5, r8, 0x0)

[  147.610641] audit: type=1400 audit(1768363907.293:11): avc:  denied  { read } for  pid=4045 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  147.623987] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.650997] loop4: detected capacity change from 0 to 276
04:11:47 executing program 5:
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20048040}, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4d, 0x0, 0xff, 0x40, 0x0, 0x852, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xce, 0x6}, 0xd0120, 0x1f, 0x40, 0x0, 0x98a, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0xffffffff000}, r1, 0x9, r0, 0xa)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

[  147.715538] loop4: detected capacity change from 0 to 276
04:11:47 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
dup2(r1, r0)
io_setup(0xfff, &(0x7f0000000040))
r2 = getpid()
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44}, r2, 0x0, 0xffffffffffffffff, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4)

04:11:55 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shutdown(0xffffffffffffffff, 0x1)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)

04:11:55 executing program 6:
creat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x84013, r0, 0x0)

04:11:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r0, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r2, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {<r4=>r2}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'nr0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r5, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000180)=0xe4de)
r6 = signalfd4(r3, &(0x7f0000000240)={[0x10000]}, 0x8, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x160, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}, @NL80211_ATTR_VENDOR_DATA={0x7, 0xc5, "068beb"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x20}, @NL80211_ATTR_VENDOR_DATA={0x102, 0xc5, "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"}]}, 0x160}, 0x1, 0x0, 0x0, 0x90}, 0x4000040)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000008000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013c00)=ANY=[])
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000001c0)=@v2={0x3, 0x1, 0xa, 0x0, 0x14, "f7a1116dc70d986f3080093416868f37504fb8a6"}, 0x1d, 0x88416b7a3ac3bab)

04:11:55 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="df000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000010000c800c000b8008000a000000000004000480040008800800020001000000"], 0x3c}}, 0x0)

04:11:55 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
close_range(r5, r8, 0x0)

04:11:55 executing program 0:
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0)
syz_emit_ethernet(0x2a1, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "381738", 0x26b, 0x21, 0xd03c5632f79363cb, @dev={0xfe, 0x80, '\x00', 0x34}, @private0, {[@fragment={0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x67}, @fragment={0x2c, 0x0, 0xb5, 0x1, 0x0, 0x9, 0x64}, @fragment={0x32, 0x0, 0xfd, 0x1, 0x0, 0x8, 0x65}, @hopopts={0x3c, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @ra={0x5, 0x2, 0xbb38}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn, @generic={0x81, 0xce, "c400b65fec925a9ffc0f8a0e6006540d40a83a8ad6835374c13ad05d0b6a8d2ae2b498bb369af54f1b0bef99929dc9947be9a82e7ff89ad4d73df439cd6c63af7635fcae198f586e686f03b3f17e6ea0e11d894a2e9d35ff89c7351fb2ee07591f136672efbf2747c7fdd6a3c6a8c157ce064e05a7e1a0d450130d7768c42d6bdd9ecdf9923b223cbc33a6125d785a1ba30c505cf9b3e261e059d7a07b57d2d455ceaa5fef3c19c6f7b7b525c8725a5fc79d07f11c76339072b4f039267fbc647dddc215a9909e436f99e401e03a"}, @pad1]}, @dstopts={0x3b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0xae, 0x4, [0x1800, 0x3f, 0x4, 0x7, 0x100]}}, @ra]}, @dstopts={0x8, 0x9, '\x00', [@ra={0x5, 0x2, 0xfff}, @generic={0x4, 0x48, "e1228f6eafcbba7d2a4a106b40ad6755acd77ed4403e0ed7f72e5e21ae05751afc59d03e3b0498289b0fe4296402114766a009dcb7d709b76756da33da3c80bc1fce7513e67d673e"}]}, @dstopts={0x6c, 0x11, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x12, [0xb3, 0x10001]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x3, 0x2, [0x2, 0x0, 0xffffffff85ef72c4, 0x2, 0x7cc, 0x400, 0xfffffffffffffffa]}}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x11400000}, @enc_lim={0x4, 0x1, 0xa5}, @jumbo={0xc2, 0x4, 0x9}]}], {{0x4e21, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x4, 0x5, "ba3d16", 0x80, "13847f"}, "625682f4772ad9c34ff39c0f6ed88036b0cdf1516e15d783369d5f"}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0xbd3, 0x86b, 0x81d, 0x3c8]})

04:11:55 executing program 4:
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f6", 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
recvmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/204, 0xcc}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0xfdef)

04:11:55 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="0000000800000000000000001bb3a207d4fd367a6491440d4dc41fcf67", 0x1d, 0x4e0}, {0x0}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a0dc0617bf3b00"])

04:11:55 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = dup(r0)
write$binfmt_elf64(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x81, 0x7, 0xa31a, 0x3, 0x3, 0x3c16, 0x6d, 0x40, 0x116, 0x0, 0x8, 0x38, 0x2, 0x5, 0xa74, 0x8}, [{0x3, 0x3, 0x401, 0x100, 0x100000001, 0x9, 0x7, 0x6}], "fed253244feb136d8a35c2c6d3736e61345ac4ee376f693ab0ceeece89adcbff33bfbf31174fd6992866b9a5c51cd9780a144dab975a537a7bf40b7f56b4a3cc82bff872b9d0421ef6bbbf218480997ba3007ee873d2ff4ddf1f811f5a7b92bb23f3cd29d1", ['\x00', '\x00', '\x00', '\x00']}, 0x4dd)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

[  155.834737] loop5: detected capacity change from 0 to 4
[  155.843145] loop7: detected capacity change from 0 to 512
[  155.855357] EXT4-fs (loop5): invalid inodes per group: 8
[  155.855357] 
[  155.855795] ext4: Unknown parameter ' Ü¿;'
04:11:55 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r2, 0x8911, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, @hci={0x1f, 0x4, 0x3}, @nfc})
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000100))
write(r1, &(0x7f0000000540)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x5000)
sendfile(r1, r3, 0x0, 0xfdef)

[  155.884062] loop7: detected capacity change from 0 to 512
[  155.899891] ext4: Unknown parameter ' Ü¿;'
[  155.902694] loop5: detected capacity change from 0 to 4
[  155.908631] EXT4-fs (loop5): invalid inodes per group: 8
[  155.908631] 
04:11:55 executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x80, 0x0, 0x4, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x5}, 0x100, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff)
r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x1ff)
r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x1, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xd049, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0x3ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = socket$unix(0x1, 0x1, 0x0)
poll(&(0x7f0000000140), 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r3, 0x8100}, {r1, 0x1000}, {r0, 0x640}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8)
r4 = openat2(r0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x2, 0x10}, 0x18)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1f, 0x4, 0xf7, 0x4, 0x0, 0xfffffffffffff7ac, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000580), 0x4}, 0xd, 0xb0a8, 0x1ff, 0x9, 0x6, 0x2, 0xc000, 0x0, 0x7fff, 0x0, 0x8001}, 0xffffffffffffffff, 0xa, r4, 0xa)
r5 = accept$unix(r0, &(0x7f0000000440), &(0x7f00000004c0)=0x6e)
fcntl$dupfd(r2, 0x0, r5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:12:04 executing program 2:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013c00)=ANY=[])
syz_io_uring_setup(0x2d1f, &(0x7f0000000040)={0x0, 0xbd0c, 0x0, 0x2, 0xc7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x800}, 0x0)

04:12:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r0, &(0x7f0000004280)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/131, 0x83}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000600)=""/23, 0x17}], 0x1, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/16, 0x10}, {&(0x7f0000001880)=""/179, 0xb3}, {&(0x7f0000001940)=""/39, 0x27}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/171, 0xab}, {&(0x7f0000002b40)=""/151, 0x97}], 0x9, &(0x7f0000002cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000002e00), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002e80)=""/157, 0x9d}, {&(0x7f0000002f40)=""/109, 0x6d}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/237, 0xed}], 0x4, &(0x7f0000004100)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/12, 0xc}], 0x1, &(0x7f0000004200)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}}], 0x5, 0x10000, &(0x7f00000043c0)={0x0, 0x3938700})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000004400)={{0x1, 0x1, 0x18, r3, {0x40}}, './file0\x00'})
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4400)
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
clock_gettime(0x0, &(0x7f000000ae00)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r1, &(0x7f000000abc0)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000004440)=""/251, 0xfb}, {&(0x7f0000004540)=""/20, 0x14}, {&(0x7f0000004580)=""/51, 0x33}, {&(0x7f00000045c0)=""/16, 0x10}, {&(0x7f0000004600)=""/238, 0xee}, {&(0x7f0000004700)=""/174, 0xae}, {&(0x7f00000047c0)=""/34, 0x22}, {&(0x7f0000004800)=""/140, 0x8c}], 0x8, &(0x7f0000004940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004980)=@abs, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/29, 0x1d}, {&(0x7f0000006a40)=""/190, 0xbe}, {&(0x7f0000006b00)=""/213, 0xd5}, {&(0x7f0000006c00)=""/178, 0xb2}, {&(0x7f0000006cc0)=""/45, 0x2d}], 0x7, &(0x7f0000006d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000006e40)=""/191, 0xbf}, {&(0x7f0000006f00)=""/155, 0x9b}, {&(0x7f0000006fc0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000008000)=""/88, 0x58}, {&(0x7f0000008080)=""/144, 0x90}, {&(0x7f0000008140)=""/205, 0xcd}, {&(0x7f0000008240)=""/207, 0xcf}], 0x4, &(0x7f0000008380)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000008480)=@abs, 0x6e, &(0x7f0000008700)=[{&(0x7f0000008500)=""/250, 0xfa}, {&(0x7f0000008600)=""/115, 0x73}, {&(0x7f0000008680)=""/28, 0x1c}, {&(0x7f00000086c0)=""/14, 0xe}], 0x4, &(0x7f0000008740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000008780), 0x6e, &(0x7f0000008b00)=[{&(0x7f0000008800)=""/122, 0x7a}, {&(0x7f0000008880)=""/214, 0xd6}, {&(0x7f0000008980)=""/105, 0x69}, {&(0x7f0000008a00)=""/253, 0xfd}], 0x4}}, {{0x0, 0x0, &(0x7f0000009040)=[{&(0x7f0000008b40)=""/27, 0x1b}, {&(0x7f0000008b80)=""/240, 0xf0}, {&(0x7f0000008c80)=""/240, 0xf0}, {&(0x7f0000008d80)=""/233, 0xe9}, {&(0x7f0000008e80)=""/223, 0xdf}, {&(0x7f0000008f80)=""/12, 0xc}, {&(0x7f0000008fc0)=""/66, 0x42}], 0x7}}, {{&(0x7f00000090c0), 0x6e, &(0x7f000000a480)=[{&(0x7f0000009140)=""/61, 0x3d}, {&(0x7f0000009180)=""/4096, 0x1000}, {&(0x7f000000a180)=""/167, 0xa7}, {&(0x7f000000a240)=""/245, 0xf5}, {&(0x7f000000a340)=""/191, 0xbf}, {&(0x7f000000a400)=""/100, 0x64}], 0x6}}, {{&(0x7f000000a500)=@abs, 0x6e, &(0x7f000000aa00)=[{&(0x7f000000a580)=""/118, 0x76}, {&(0x7f000000a600)=""/237, 0xed}, {&(0x7f000000a700)}, {&(0x7f000000a740)=""/88, 0x58}, {&(0x7f000000a7c0)=""/157, 0x9d}, {&(0x7f000000a880)=""/155, 0x9b}, {&(0x7f000000a940)=""/167, 0xa7}], 0x7, &(0x7f000000aa80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x9, 0x10000, &(0x7f000000ae40)={r5, r6+60000000})
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r10=>0x0})
bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="686737499d74"}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f000000af80)={'syztnl2\x00', &(0x7f000000ae80)={'syztnl1\x00', r10, 0x20, 0x1, 0x8f72, 0x7, {{0x2b, 0x4, 0x1, 0x0, 0xac, 0x66, 0x0, 0x40, 0xc78bdd867a80893e, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0xdd, 0x0, 0x3, [0x7fffffff, 0xffffffff, 0x2, 0x64a]}, @generic={0x0, 0x8, "60afe3173a50"}, @end, @rr={0x7, 0x1b, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0xd4, 0x3, 0x1, [{@local, 0x1}, {@multicast2, 0x1}, {@loopback, 0x7}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@loopback, 0x40}]}, @timestamp_addr={0x44, 0x2c, 0x34, 0x1, 0x1, [{@remote, 0xffff}, {@multicast2, 0xc16}, {@rand_addr=0x64010100, 0x3ff}, {@empty, 0x7ff}, {@private=0xa010100, 0x401}]}]}}}}})
listen(r0, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

04:12:04 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @global=@item_4={0x3, 0x1, 0xb, "eb1a3f1a"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x40, 0xf, 0x55, {0x55, 0x22, "c976e6d6e0c291f3470787bd65be943221a1b83874259917b57699f25dc7785a847759de5377fd5bf712f50f664bfac8101a6351c91b1038d080f8bbe058055d445cd1bd677522cc9047b5d2b0594e2ee01d03"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000500)=ANY=[@ANYBLOB="0022030000008005ee49fdbcd84f92be81cce9170b6827382b29e547e9c5109e515a93066d040446d2832ff4970c14e48f09fd74201e9bf2c5406b62e100a609d780241ab1476a5cd26106ba0ce18db1a98bbdf75090fa"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd3c1, 0x1, 0x1, {0x22, 0xfc}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x40, 0x7, 0x6e, "2bfd16e521878eb00e002b9148368afb49c1712fe039b15bfa747074d7d03855824e3fad7c7b58c2ad266b39c32f38ef048d48f072009f71c1e8f8661911cf59242479d11b41454921af4a69ff7ea9954685f78e89181d6db741514633f6c97d3ff5451a6c1ffcff2ba27ee4af74"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x1, 0x1b, "332613ca82585f49f4d49a2af6e402d9e2a0010ea03932d08c7a4e"}, &(0x7f0000000380)={0x20, 0x3, 0x1}})
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x1f, 0xcd, &(0x7f0000000400)="db4615bf05b5a589c4bec247107aaf38b041f9439648d3f441dc9cfd642a30eeb58277cebb0a952ab222ebd889e0bc065cbd8be23ef2f1e581acb73c010b22913961f087cd40c9ac36929f3b7d3c95347752c4c7c16224cba659a52dd86294ebd8d45298921a7e807f8fbd96921427a20282edd0a0c4136ce8f377a3c540f991bd63bacb10821005d776f07aeaa2d3a81c027480c967da3875cd21c87ed5eb6c5b1307dc7a3183dc17e0e9c24feb4430e5097c899560c0bc485284e30d871e94a8946fbe600e3698154e884b29")
r1 = syz_usb_connect$uac1(0x6, 0xc9, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0xc, 0xd0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x9}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0xfff, 0x1f}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x4, 0x1f, 0x9, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x2, 0x3, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x9, 0x3, {0x7, 0x25, 0x1, 0x0, 0x81, 0xecf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x7f, 0x80, "9444", "10a3"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x1, 0x0, 0x8, '_'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfff, 0x7fff, 0x2, "b2b819b6f64ad2"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7f, 0x5, "c169c782ff5e4886aa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x3f, 0xf1, {0x7, 0x25, 0x1, 0x82, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x2, 0x1f, 0x40, 0xff, 0xbc}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x860}}, {0xf3, &(0x7f0000000740)=@string={0xf3, 0x3, "6f1ad2277879af1eb110da19eb896d66058b1bc1da1121cb5c082815e47894c6730f44450def3d4b598b504276ca8061d08871b464ba2562a715c2dd74441973342d4d0494ef451d848a1e33b20e37e75d42fd3cb18d85f4525bb2ec5f2ccae82c662168911dac2b6a42d30e0d967fae8c197e7ed2b0f8c3a721f5307e6cad6c23cbdd547a0312cda26473bc5a42c2162a17686d2869c1c69a6035288f6871452a4a608d9404230f59838fdc73125340f6afd881ed73e528d2a4191d4ec07f920a131fde3365b9a7db32f3637fc832b405e66b48208502e982283a128844da66e1b4b309bf5a23ec6fbde7db1704ffc111"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xeb, &(0x7f0000000880)=@string={0xeb, 0x3, "cfff5f1980ca8b9fc81a996eedf0151c7336dc95f8dbc9c43a89aea0193c3235eb67d5133141eb8d1db69195f5038ba5032af412264df7be7f37a043c88da783e341022f022c028e1f78ed94260f239b3e15a00ba35923d9e312dc438bb58330fd53d3c97160b954926d687d1890ca3a063bfd068455719c25130f5d4337ea7bc5f0911cb4e46a30c7ba268aa86db55086a3b6968942564f110227dc308cc5fd103417e680be358734bdaee6e07170d9a64d6d6c5c974283f0c1b28d93d5d1a48f388761564d495c50cad31d58f284357026dedd6a5a47506dd213860e83a8a61c987e29fed81d0fc9"}}, {0x86, &(0x7f0000000980)=@string={0x86, 0x3, "aecb03a854738004ece5cbc8f99a9abe7e50a39a045e09985b4fe4c80f31f1cec0b12fc1ec10944aae572b2aa1cf6f5e4561dfd85904f1c2a235422fd8d483fa480147fbe32cda8eb6acf0016052d2cbdf9fc02cedab26bb9f32fd8124b46d10671e5cb1e69d728e6150fd221f3c806af7c031354a102675819c5393318e5365cf6eba6b"}}]})
syz_usb_ep_write(r1, 0x3, 0xf8, &(0x7f0000000ac0)="c58641a6aeb29b017015c89b7e8b625e69e8937a6046465261a52699ceebed1dcda06b4b29949f17ebc4d646eb3e571fab674fc0770c471c74297dfbe715b9b10042935ecf0570359ad27e00d4a09ded1dcf66e3de3a0fe7137ad5cb1b0d488d7a3e4e2303a11e9201a947afc1547f9fb5eb823f03e8deaea940674545798a4258e1532c3d3474ed7ebde09280eaefd8531d299bf163f6dbfa0de11948c2c9f0e1d50bec0e72ae54f724b428e2bde4d27d0263c2c529118c5feb5d0ac3ba45185bfdbd0cd0462261c5e18e97760713edcf10baa7f7a4c0edfe5c36fb8a8b909087fd6d7e361dbbca6667fe2e2a6a97900d2d96866bf70ecb")

04:12:04 executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x80, 0x0, 0x4, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x5}, 0x100, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff)
r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x1ff)
r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x1, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xd049, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0x3ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = socket$unix(0x1, 0x1, 0x0)
poll(&(0x7f0000000140), 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r3, 0x8100}, {r1, 0x1000}, {r0, 0x640}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8)
r4 = openat2(r0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x2, 0x10}, 0x18)
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1f, 0x4, 0xf7, 0x4, 0x0, 0xfffffffffffff7ac, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000580), 0x4}, 0xd, 0xb0a8, 0x1ff, 0x9, 0x6, 0x2, 0xc000, 0x0, 0x7fff, 0x0, 0x8001}, 0xffffffffffffffff, 0xa, r4, 0xa)
r5 = accept$unix(r0, &(0x7f0000000440), &(0x7f00000004c0)=0x6e)
fcntl$dupfd(r2, 0x0, r5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:12:04 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
close_range(r5, r8, 0x0)

04:12:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)
r1 = getpgrp(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x9e, 0x5e, 0x81, 0x0, 0x2, 0x38204, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x3ff, 0xfffffffffffffffe}, 0xc4a77ed02a8bbe23, 0x92d, 0x10000, 0x4, 0x8, 0x9, 0xb, 0x0, 0x1000, 0x0, 0x5}, r1, 0x6, r2, 0x0)

04:12:04 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)=0xf)

04:12:05 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000773c35c2b758eae5bbc3f020ebe4f91f52860ac6bf71137fa96bb54724c28105aba8f14b3cc04f0d10ee5a2f6b2c7ceb5a7d77ee6f103035e6191b277b4c1051d88c87121782656c6a1f9d01cd70ec61e0fbb2728cc3033d0b1404861c169b506707d12f61a2a3a308d853aa9ee7a0130c1f0ad333b42d8515aa6221bbea7688e1395dd03f744e9d95294a8c42103b6f9f2a8c3c34f1e34bf2a9833629293aa41c5cf396543218f9498452276702919a3d59ef36a8351d8304477a1ba2864fefadd63e9bed5853c0b04dd66eda6c4157ab1a1ee015010c5925021c785fac0abe498aa6"])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r1=>0x0}, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff)
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1f, 0x3, 0xf8, 0x80, 0x0, 0x7, 0x1810, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x40088, 0xa5a, 0x5, 0x3, 0x9, 0x3, 0x7c, 0x0, 0x5, 0x0, 0x7f}, r2, 0x1, r0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = dup(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x4)
fcntl$setownex(r5, 0xf, &(0x7f00000002c0)={0xdbe7ce31b1875366, r1})
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long}, 0x11)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0xfffffffffffffee4}, 0x1, 0x0, 0x0, 0x4004}, 0x24000010)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)

[  165.371207] loop2: detected capacity change from 0 to 4
[  165.371896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.385443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.392564] EXT4-fs (loop2): can't read group descriptor 0
[  165.417218] loop2: detected capacity change from 0 to 4
[  165.431960] EXT4-fs (loop2): can't read group descriptor 0
04:12:05 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)
r1 = getpgrp(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x9e, 0x5e, 0x81, 0x0, 0x2, 0x38204, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x3ff, 0xfffffffffffffffe}, 0xc4a77ed02a8bbe23, 0x92d, 0x10000, 0x4, 0x8, 0x9, 0xb, 0x0, 0x1000, 0x0, 0x5}, r1, 0x6, r2, 0x0)

04:12:05 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x3f, 0xffffffff}, 0x4d059, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

04:12:05 executing program 2:
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x7fffffff, 0x3, 0x1, 0x81, 0xfc, "074dbd8ccc3c9b07fbe8f7b023f98b1064b846", 0x40, 0x8001})
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
ioctl$KDDISABIO(r2, 0x4b37)

[  165.582822] random: crng reseeded on system resumption
04:12:05 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45520000ea80325132502000ea80325100000000000049660069006c00650030000f", 0x29, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00b957a0b7edfa06bdea36e8d2e7ef1f38161323fca015ae"])
getdents(r0, &(0x7f0000000240)=""/150, 0x96)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r1, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x80)

04:12:05 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xfb, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x6}, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
r3 = fork()
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x28, 0x80, 0x8, 0x9, 0x0, 0x7, 0x82004, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000280)}, 0x40000, 0x8000, 0x10000, 0x9, 0x8, 0x7f, 0x5, 0x0, 0x0, 0x0, 0xffffffffffff099b}, r3, 0xb, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x37, 0x2, 0x0, 0x1, 0x0, 0x8, 0x5000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x3000, 0x200, 0x1, 0x3, 0x32c0000000, 0x7fff, 0xe1, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r2, 0x1)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000003c0)={0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
r4 = dup(r1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r5, 0x0)
mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0x36)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x5420, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r6, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000200)={0x0, 0x4, 0xcc3, 0x0, 0xf})

[  165.647990] random: crng reseeded on system resumption
[  165.651828] loop5: detected capacity change from 0 to 6
[  165.668428] FAT-fs (loop5): Directory bread(block 6) failed
[  165.677366] FAT-fs (loop5): Directory bread(block 6) failed
04:12:05 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
open_by_handle_at(r0, &(0x7f0000000040)=@xfs_parent={0x1c, 0x82, {0x1000, 0x0, 0x7f, 0x5}}, 0x8002)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x80)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x40086607, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040)

04:12:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000700)="eb58906d6b66020000000020004000030000000000000001000000000000000000000000006e87c87cf2f7c45339755ad4e8c3997e04d9da8b9f001fefe8967937c0dc8f2c229d0e", 0x48, 0x4}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00f78622783d23fc238a1d3447c1c4efaceaeba3002bef7184f79cfa11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6", @ANYRESHEX=r0])
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r1 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x18b, 0x0)
mq_timedsend(r1, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680})
dup2(r1, r1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000180))
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

04:12:05 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x3, 0x90, 0x1, 0x0, 0x4, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x4}, 0x80, 0x4, 0x40, 0x4, 0x1, 0x1, 0xa8b0, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2)

04:12:05 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000773c35c2b758eae5bbc3f020ebe4f91f52860ac6bf71137fa96bb54724c28105aba8f14b3cc04f0d10ee5a2f6b2c7ceb5a7d77ee6f103035e6191b277b4c1051d88c87121782656c6a1f9d01cd70ec61e0fbb2728cc3033d0b1404861c169b506707d12f61a2a3a308d853aa9ee7a0130c1f0ad333b42d8515aa6221bbea7688e1395dd03f744e9d95294a8c42103b6f9f2a8c3c34f1e34bf2a9833629293aa41c5cf396543218f9498452276702919a3d59ef36a8351d8304477a1ba2864fefadd63e9bed5853c0b04dd66eda6c4157ab1a1ee015010c5925021c785fac0abe498aa6"])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r1=>0x0}, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff)
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1f, 0x3, 0xf8, 0x80, 0x0, 0x7, 0x1810, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x40088, 0xa5a, 0x5, 0x3, 0x9, 0x3, 0x7c, 0x0, 0x5, 0x0, 0x7f}, r2, 0x1, r0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = dup(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x4)
fcntl$setownex(r5, 0xf, &(0x7f00000002c0)={0xdbe7ce31b1875366, r1})
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long}, 0x11)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0xfffffffffffffee4}, 0x1, 0x0, 0x0, 0x4004}, 0x24000010)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)

[  165.878007] audit: type=1400 audit(1768363925.562:12): avc:  denied  { tracepoint } for  pid=4203 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  165.882499] loop5: detected capacity change from 0 to 64
[  165.891101] FAT-fs (loop5): bogus number of FAT structure
[  165.897184] mmap: syz-executor.0 (4210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  165.903538] random: crng reseeded on system resumption
[  165.906823] syz-executor.3 (278) used greatest stack depth: 24072 bytes left
[  165.910368] FAT-fs (loop5): Can't find a valid FAT filesystem
[  165.924742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.925833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.143877] loop5: detected capacity change from 0 to 64
[  166.147375] FAT-fs (loop5): bogus number of reserved sectors
[  166.147857] FAT-fs (loop5): Can't find a valid FAT filesystem
[  168.546207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.549276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.551628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.557565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.559742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  170.583523] Bluetooth: hci0: command tx timeout
[  172.631459] Bluetooth: hci0: command tx timeout
[  174.679354] Bluetooth: hci0: command tx timeout
[  176.727367] Bluetooth: hci0: command tx timeout
[  179.316930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.318570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.370034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.370951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
04:12:28 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000773c35c2b758eae5bbc3f020ebe4f91f52860ac6bf71137fa96bb54724c28105aba8f14b3cc04f0d10ee5a2f6b2c7ceb5a7d77ee6f103035e6191b277b4c1051d88c87121782656c6a1f9d01cd70ec61e0fbb2728cc3033d0b1404861c169b506707d12f61a2a3a308d853aa9ee7a0130c1f0ad333b42d8515aa6221bbea7688e1395dd03f744e9d95294a8c42103b6f9f2a8c3c34f1e34bf2a9833629293aa41c5cf396543218f9498452276702919a3d59ef36a8351d8304477a1ba2864fefadd63e9bed5853c0b04dd66eda6c4157ab1a1ee015010c5925021c785fac0abe498aa6"])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r1=>0x0}, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff)
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1f, 0x3, 0xf8, 0x80, 0x0, 0x7, 0x1810, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x40088, 0xa5a, 0x5, 0x3, 0x9, 0x3, 0x7c, 0x0, 0x5, 0x0, 0x7f}, r2, 0x1, r0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = dup(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x4)
fcntl$setownex(r5, 0xf, &(0x7f00000002c0)={0xdbe7ce31b1875366, r1})
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long}, 0x11)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0xfffffffffffffee4}, 0x1, 0x0, 0x0, 0x4004}, 0x24000010)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)

04:12:28 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6, 0x0, 0xfd}]}, 0x10)

04:12:28 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

04:12:28 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000700)="eb58906d6b66020000000020004000030000000000000001000000000000000000000000006e87c87cf2f7c45339755ad4e8c3997e04d9da8b9f001fefe8967937c0dc8f2c229d0e", 0x48, 0x4}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00f78622783d23fc238a1d3447c1c4efaceaeba3002bef7184f79cfa11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6", @ANYRESHEX=r0])
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r1 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x18b, 0x0)
mq_timedsend(r1, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680})
dup2(r1, r1)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000180))
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

04:12:28 executing program 4:
[  188.897417] loop4: detected capacity change from 0 to 512
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35393734373637303400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000026acba7564fc4e5aa2fa9146860a2012010000000c00000000000000def4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3000}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000011600)="504d4d00504d4dffdef4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f0000011e00)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000012a00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000def4655fdef4655fdef4655f00"/64, 0x40, 0x10fe0}, {&(0x7f0000012e00)="ed41000000080000def4655fdef4655fdef4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x11080}, {&(0x7f0000012f00)="8081000000180000def4655fdef4655fdef4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000def4655fdef4655fdef4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000def4655fdef4655fdef4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="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"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="484076ab078b811ab667a9d927ef26d066504c7dafcdc81ef07453dbb513b38825971221532a63f4e874a0cf778d0e75562b0c4eff05a3ef460dcd4dc5"])
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0)

04:12:28 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
uname(&(0x7f0000000400))
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)=ANY=[@ANYBLOB="5461566c3cee8016b633d1d4b0ebba06a8b1a4898d0b989d8995224323f345e66ec3a23d95116e141ae7b8ab7c91216a24db89f73653815e95f757adb64551b1396c419f9c2ee64d254c1459437a5dbb9d5eb1194436e986cb0e4e85d76b2bbbd87213e77c25fa637be2ce797041b4a8b57f04fd8e4cbcf3139377031c34c01d02bd442472cc8c8cfa8e2f2172325486677af69bcf785f3f223a8560c02b0926cf47ed57ee588ae0d7c223a6effc8abcf9739c6b9b14e435ab2e777dda6a142c0c8d71e99f2164b5f00d5985fe488c2fbf9c8072535f0756a26822dc44abee070000005c341dc25ba404ae5322821cd8c5f5e1a468bc7e8f9552ceb1d7", @ANYRES32=<r3=>r2, @ANYRES32=<r4=>r0, @ANYBLOB="00a625caf86367cb0c93c000"])
close_range(r2, r3, 0x2)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, 0x0)
pidfd_getfd(r7, r7, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:12:28 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x3, 0x90, 0x1, 0x0, 0x4, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x4}, 0x80, 0x4, 0x40, 0x4, 0x1, 0x1, 0xa8b0, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2)

04:12:28 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0x2, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x2558fe}}], 0x30}}], 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))

[  188.908964] ext4: Unknown parameter 'H@v«‹�¶g©Ù'ï&ÐfPL}¯ÍÈðtSÛµ³ˆ%—!S*côèt Ïw�uV+Nÿ£ïFÍMÅ'
04:12:28 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000013c00)=ANY=[])
socketpair$unix(0x1, 0x0, 0x0, 0x0)

[  188.945562] loop5: detected capacity change from 0 to 64
04:12:28 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x6, 0x5})
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffffffffffff8001)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="010203010902240001010000000904000069e673a3a65163be1a1af5bdb4bf54bc0003010000092100000001220000090581030000000000"], 0x0)

[  189.002120] FAT-fs (loop5): bogus number of FAT structure
[  189.003113] FAT-fs (loop5): Can't find a valid FAT filesystem
[  189.004963] loop1: detected capacity change from 0 to 512
[  189.022674] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  189.035518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.036225] loop1: detected capacity change from 0 to 512
[  189.041232] random: crng reseeded on system resumption
[  189.043457] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
04:12:28 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x3f, 0x3, 0x100, 0x18, "1a7643938ae0cd16"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r2, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can={0x1d, <r3=>0x0}, @nfc})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r5, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r6=>r3, 0x80, 0x7800, 0x27c, 0x100, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x64, 0x0, 0x80, 0x2f, 0x0, @local, @loopback, {[@timestamp={0x44, 0x14, 0x52, 0x0, 0x3, [0x81, 0x25136bda, 0x101, 0x80000001]}]}}}}})
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffff81}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4841)
setuid(r4)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1000010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}], [{@smackfsroot={'smackfsroot', 0x3d, '.%}^'}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, r4}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee00}}]}})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1f)
dup2(r7, r8)

[  189.056592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
04:12:28 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e)
fcntl$setstatus(r0, 0x4, 0x44000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4)
sendfile(r0, r1, 0x0, 0xfdef)

04:12:28 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x3, 0x90, 0x1, 0x0, 0x4, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x4}, 0x80, 0x4, 0x40, 0x4, 0x1, 0x1, 0xa8b0, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2)

04:12:28 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000773c35c2b758eae5bbc3f020ebe4f91f52860ac6bf71137fa96bb54724c28105aba8f14b3cc04f0d10ee5a2f6b2c7ceb5a7d77ee6f103035e6191b277b4c1051d88c87121782656c6a1f9d01cd70ec61e0fbb2728cc3033d0b1404861c169b506707d12f61a2a3a308d853aa9ee7a0130c1f0ad333b42d8515aa6221bbea7688e1395dd03f744e9d95294a8c42103b6f9f2a8c3c34f1e34bf2a9833629293aa41c5cf396543218f9498452276702919a3d59ef36a8351d8304477a1ba2864fefadd63e9bed5853c0b04dd66eda6c4157ab1a1ee015010c5925021c785fac0abe498aa6"])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r1=>0x0}, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff)
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1f, 0x3, 0xf8, 0x80, 0x0, 0x7, 0x1810, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x40088, 0xa5a, 0x5, 0x3, 0x9, 0x3, 0x7c, 0x0, 0x5, 0x0, 0x7f}, r2, 0x1, r0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = dup(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x4)
fcntl$setownex(r5, 0xf, &(0x7f00000002c0)={0xdbe7ce31b1875366, r1})
connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @long}, 0x11)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0xfffffffffffffee4}, 0x1, 0x0, 0x0, 0x4004}, 0x24000010)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)

04:12:28 executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r1, 0x2)
r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
r3 = socket$unix(0x1, 0x1, 0x0)
poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff)
ppoll(&(0x7f0000000180)=[{r3}, {r1, 0x1000}, {r1, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="003000000000010000000000000000cf1544258641e4027ae4b9bb00"])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
pwritev2(r4, &(0x7f0000000680)=[{&(0x7f00000004c0)="1b4e61512f2015c364b665b0160756bccd8cc64f23a4efca23bd518e964474f9deadf2caec0ac544722b07e7fd5b50885274d5b1b8424c7030be073bb60a29291835d80f0f2dcd9dc917df0b6a99796bbe417571dd5e44fb554ec363b8cd27590d4950810f9bad86a2919c839f8ff36ec7355a3f2543b862f79b38259f0ed70535c374a3103e1f94f178fefface25f5f12c3c36e1427d6d4a0110d3415cb36c2adcd0a3f5354d9f9700ebc046d27eee6bcc87b03e9f57639a33d4d85b2da890dc84b57756f8708d5780524484bcdeabcfabbf0310ac46d2ceaacaf59d056a6e027e0070d4c901445919b82dd3fab5cdd7b6db51a2edb78c425", 0xf9}, {&(0x7f0000000400)="5008b74525256d35ad2153c577768a798a9afa68753131272885", 0x1a}, {&(0x7f00000005c0)="36bae3dfa6497ffd6ee1e58638ff1a5b7dc189b8a63a916c251b944b2b09d2fd87931d299cbe7a37b85c296438537fd4cf37d70fbac9951ffab14a393e5ba7ed641d6013e93d73124aea84bf310bf5d97a438c64e8c50a693e60bfeb47fbc88de582a0db4b74f38ea47b1889d1c1bd0927f5ec015356f0df", 0x78}, {&(0x7f0000000640)="60deaecae5a496e4405aa49eb81526680042bee5f65631e8", 0x18}], 0x4, 0x5, 0xe3a, 0x5)

04:12:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty}}}, 0x88)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x281, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x5ac615fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

[  189.343934] random: crng reseeded on system resumption
[  189.418387] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
04:12:29 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x3, 0x90, 0x1, 0x0, 0x4, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x4}, 0x80, 0x4, 0x40, 0x4, 0x1, 0x1, 0xa8b0, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2)

04:12:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty}}}, 0x88)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x281, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x5ac615fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

[  191.908655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.912527] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.915296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.921273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.926401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.007558] Bluetooth: hci0: command tx timeout
[  196.057430] Bluetooth: hci0: command tx timeout
[  198.106633] Bluetooth: hci0: command tx timeout
[  200.151429] Bluetooth: hci0: command tx timeout
[  207.035374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.037191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.101979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.103096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
04:12:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>0xee01, 0xee00}}, './file0\x00'})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000001, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r2}}], [{@subj_user={'subj_user', 0x3d, '}\\!:$^!#*+'}}]})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0xe, 0x4e, 0x8, 0x0, 0x9, 0x200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x850, 0x2, 0x6, 0x8, 0x86c, 0x1, 0xfff, 0x0, 0x80000001, 0x0, 0x1}, 0x0, 0xa, r1, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

04:12:55 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:12:55 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\b'])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, <r0=>0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x20, 0x2, 0x69, 0x1, 0x0, 0x3, 0x1020, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6cbf, 0x2, @perf_config_ext={0x6408}, 0x2400, 0x7, 0x81, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x3}, r0, 0x9, r1, 0x8)

04:12:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000400), 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4)

04:12:55 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x8, 0x4, 0x5, 0x0, 0x6, 0x10100, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x80, 0x80000000}, 0x46000, 0xffff, 0x0, 0x9, 0x8, 0x7, 0x6, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xf, r0, 0x1)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080))
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000008, 0x10, r0, 0x6be58000)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0xc9eb, 0x4)
sendmmsg$sock(r1, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}], 0x1, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x80)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x120053, r2, 0xea727000)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in=@remote}}}, &(0x7f0000000040)=0xe8)

04:12:55 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7b, 0x0, 0x2, 0x0, 0x0, 0xc853, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x56e}, 0x9050, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[])
getdents64(r0, &(0x7f0000000040)=""/204, 0xcc)
socket$nl_generic(0x10, 0x3, 0x10)
readahead(r0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

04:12:55 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

04:12:55 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e)
fcntl$setstatus(r0, 0x4, 0x44000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4)
sendfile(r0, r1, 0x0, 0xfdef)

[  215.904965] vfat: Unknown parameter ''
[  215.907966] loop6: detected capacity change from 0 to 64
[  215.935749] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
04:12:55 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:12:55 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

[  216.017722] vfat: Unknown parameter ''
04:12:55 executing program 5:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x33820a0, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]})
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000001c0)=@v3={0x3000000, [{0x5, 0x9}, {0x7fffffff, 0x7fffffff}]}, 0x18, 0x1)
fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000, 0x4, &(0x7f0000000500)=[{&(0x7f0000000280)="cf91e5b07def0e7d76fa1607a05e5aed7dcc7003b7bf1b98204e53c65332fdd9d78e8f4165b5e07c379a3aa5b6ac20039beeeac36d75ab8e8677dcd5998b9d50cf8634b05cd8283771a50a900fafd873047a9d34f563541b2a68c721db5009330ffa9d374a4d98910896458f01d70bbcff3470128dea9eecfe5da848b81de0a387a874f9dfd9fffe58470784425d20da272a5208d899a95037ae651e8acda08d39b3d0beedb96702632191eeb514ef0fe7be841ba6902bde8099fd243e98c74c72fbb45a86f5fdf6353576102c5b135fa089f8b11a19d47c657f930a33a93f2d4ef9ead64cfa748e5d5913c3298d6c", 0xef, 0x6}, {&(0x7f0000000380)="fd38a1e49d7a5dd32aa2ee6b65ecb15456b2c350eeb850c9f14af1fe4a51a6e2aeff67c42173342ebb72e42018ec042e1a2d74c497d0f4eb5a8b65e14335efdd89d4ba92c6f758da85189cf16051bb952182c603dc4d5b410d9183bb4d83c4a5e8b10b39afd12f0350f9a9cce39a43f77cad58d272262fdeea8dc40ee9aa1c4c6cfb45c18d99e9697a232c804989e600e8e359e0951fff0c3d8f145b522416584a1b4714a9da52d0bfcd546fe9114d518a0c1e04c3165f00b92a4c103884216332d0b69ebde32607d7392b88fb63d40d939f2f8f1fddc9162dc4d1b94e65386989be43b2e8d60ed73da4dae614147caf5312800dfafe1945f6deff01", 0xfc, 0xfffffffeffffffff}, {&(0x7f0000000480)="3f8ac41948d21990fad13312e705a57b8fe85d3f9d0bca209448b46d0f88601b19a90207cd75b0a3e894582cfded5cf32b322a07", 0x34, 0x3}, {&(0x7f00000004c0)="e9d6", 0x2}], 0x2102000, &(0x7f0000000600)={[{@huge_advise}], [{@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\xdd}'}}, {@uid_lt={'uid<', r0}}, {@subj_user}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nr_inodes'}}, {@obj_type={'obj_type', 0x3d, 'nr_inodes'}}]})

04:12:55 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x27, 0x0, &(0x7f0000000040)=[r3]}, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
clock_getres(0x5, &(0x7f0000000000))
semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x800}, {0x0, 0x1f, 0x1000}], 0x2, &(0x7f0000000280)={0x77359400})

04:12:55 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

[  216.119743] hugetlbfs: Bad value 'p' for mount option 'nr_inodes'
[  216.119743] 
[  216.133644] loop5: detected capacity change from 0 to 147455
04:12:55 executing program 7:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x24842, 0x0)
close_range(r1, r0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180))

[  216.153702] hugetlbfs: Bad value 'p' for mount option 'nr_inodes'
[  216.153702] 
04:12:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>0xee01, 0xee00}}, './file0\x00'})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000001, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r2}}], [{@subj_user={'subj_user', 0x3d, '}\\!:$^!#*+'}}]})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0xe, 0x4e, 0x8, 0x0, 0x9, 0x200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x850, 0x2, 0x6, 0x8, 0x86c, 0x1, 0xfff, 0x0, 0x80000001, 0x0, 0x1}, 0x0, 0xa, r1, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

04:12:55 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r8, 0x0)

04:12:55 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc8}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}]}, 0x38}}, 0x0)

[  216.247170] perf: interrupt took too long (3179 > 3148), lowering kernel.perf_event_max_sample_rate to 62000
[  216.248355] perf: interrupt took too long (3179 > 3148), lowering kernel.perf_event_max_sample_rate to 62000
[  216.275195] loop6: detected capacity change from 0 to 6
[  216.313450] perf: interrupt took too long (4996 > 4986), lowering kernel.perf_event_max_sample_rate to 40000
[  216.333530] perf: interrupt took too long (6250 > 6245), lowering kernel.perf_event_max_sample_rate to 32000
[  216.407708] Bluetooth: hci2: command 0x0406 tx timeout
[  217.096249] loop6: detected capacity change from 0 to 6
[  220.504655] Bluetooth: hci4: command 0x0406 tx timeout
[  220.507544] Bluetooth: hci1: command 0x0406 tx timeout
[  220.509217] Bluetooth: hci5: command 0x0406 tx timeout
[  220.511235] Bluetooth: hci3: command 0x0406 tx timeout
[  220.512391] Bluetooth: hci6: command 0x0406 tx timeout
[  220.513626] Bluetooth: hci7: command 0x0406 tx timeout
04:13:04 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r1, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @phonet={0x23, 0x8, 0x4, 0x5}, @qipcrtr={0x2a, 0xffffffff, 0x4001}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, 0x1f, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='wg1\x00', 0x44, 0x0, 0x3ff})

04:13:04 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:04 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x27, 0x0, &(0x7f0000000040)=[r3]}, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
clock_getres(0x5, &(0x7f0000000000))
semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x800}, {0x0, 0x1f, 0x1000}], 0x2, &(0x7f0000000280)={0x77359400})

04:13:04 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}], 0x28}}], 0x2, 0x0)

04:13:04 executing program 7:
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe0}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48081}, 0x4041)
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0/file0\x00', 0x0)

04:13:04 executing program 2:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f000000000000040008000000000000000500000006", 0x29, 0x4100}, {&(0x7f0000012900)="ed4100003c000000e1f4655fe1f4655fe1f4655f000000000000020000000000000000100300000002", 0x29, 0x4b00}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x6000}], 0x0, &(0x7f0000013800)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x400081, 0x1a6)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r1, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0))

04:13:04 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, 0xffffffffffffffff, 0x0)

04:13:04 executing program 0:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

[  225.276987] loop6: detected capacity change from 0 to 6
[  225.347565] loop2: detected capacity change from 0 to 512
04:13:05 executing program 5:
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x7e, 0x42, 0x0, 0x0, 0xa7ca, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x7d}}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe350000000000}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80095}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="f2feffff", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000000000300", @ANYRES32=r3, @ANYBLOB="08003700e4000000"], 0x30}}, 0x4008000)
pread64(r1, &(0x7f00000002c0)=""/26, 0x1a, 0x2)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
r4 = fork()
ptrace(0x10, r4)
r5 = fork()
ptrace(0x10, r5)
ptrace(0x8, r5)
ptrace$getsig(0x4202, 0x0, 0x1000, &(0x7f0000000240))

[  225.399027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
04:13:05 executing program 0:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:05 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, 0xffffffffffffffff, 0x0)

[  225.435371] tmpfs: Unknown parameter './file0'
[  225.442565] EXT4-fs error (device loop2): __ext4_iget:5425: inode #12: block 2: comm syz-executor.2: invalid block
04:13:05 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r0, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80800040)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000e1f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38343433353034323400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000047878d126f6347e1b360d317cdb2f98e010040000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e1f4655fe1f4655fe1f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000e1f4655fe1f4655fe1f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4080}, {&(0x7f0000012600)="8081000000c04000e1f4655fe1f4655fe1f4655f000000000000010080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000100"/128, 0x80, 0x4300}, {&(0x7f0000012700)="c041000000400000e1f4655fe1f4655fe1f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4500}, {&(0x7f0000012800)="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"/768, 0x300, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012c00)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000012d00)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000012e00)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000012f00)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013000)="504d4d00504d4dffe2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000013200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000013700)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000013800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/96, 0x60, 0x80000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x80fe0}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xa0000}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0025a3302019136ff6cbb8c6b06742d92fbe460f55adff3c583815"])
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x542600)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x20040, 0x109)

04:13:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9)
open_by_handle_at(r1, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0x1, {0x16200000, 0x6}}, 0x20040)
close(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8, 0x3e7ee0a7}}, './file1/file0\x00'})
r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file1/file0\x00', 0x2, 0x9, &(0x7f0000001580)=[{&(0x7f00000001c0)="4c362045aa5b1da974b844226a93fcefa3f59c37ce6d0e403f39e3d0ceec72b9469b8f48d881237ef78695c8a6caa2604c5f8bac2195d0faed38c3810c1ffc44322dd670832f6c76ca142f57d7edec6ff7c8205789babb01b46b8e040b132dde8daeaac4748660b139b1a90b9efa7863610a828bef663c33f7536588be387a2e736d02e5e005da8bb27f572555c64ada8c30140ee6be54c77127ca399e39e72ae73c24948e4ecaa0b4ba45b21d2753a0dc91faad218781acfa28c0c2d3aac260e471385e6e44e1968a38dae03b24edd0133cc62279f63580bf32b9722166d908c818fcc42544f5f911b6e98edc7f10cab6e14c51678c", 0xf6, 0x80000001}, {&(0x7f00000002c0), 0x0, 0xaf3}, {&(0x7f0000000300)="5bcac6c282433314a7878e42cd7d15b43a6fb6c12dd53005522b6107d6a889efbc2a9e7a06feec4d3b40488acbe182d5528b304126ad4dd7c74b123a131f53d93a42f034d8c82fb0d649754b6b0e03a80a6529e9d6f484ae3ba85e1c6424fae9e39f82f4881a37a166eefc7c0ad726f1fa8945539faf27777eeade568a46d3dd76159ada2e747857f5a2f01b75d2", 0x8e, 0x8}, {&(0x7f00000003c0)="a2b4d0ab093673960df3c3b3b029d89dbe4251a843e527f7334ebd7f0c1724078ed6b6ac3aae24dc62c5c80d2bfdb4cfc0d3564b1ceb389b0e84", 0x3a, 0x8}, {&(0x7f0000000400)="c99c796a5baa4a11f9ae6eb5be35508baedaa7552645305bc6652bdd9449e37fe179b24122693c6762d68b0352962f1cbb38150f70f3434a875d7e430dc5bd", 0x3f, 0x1000}, {&(0x7f0000000440)="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", 0x1000, 0x488}, {&(0x7f0000001440)="c4c83a17a24e54c300bb488a394828f59e410d1e1f35cee12cfd7a7fb7dfc1ca7fb2fb097d0644cd94c322a40b40719168df8ff16e4e516ff0eeb34823c9881555be30c5d9495063d0f6daf108551f182af577371ddde1ea8e030ffdc9d94313671c5e9777991f9b29135920eb48629a2de9f96eb24235d5ef58ef125e9748489a1bedc7764e2b1180de488bf19218f2eadf1b611f1dc1c58fde7514", 0x9c, 0x3ff}, {&(0x7f0000001500)="03a399a9d8cf93dae33d51ec43a90a08e84594ed1fe0aa63a70c0469e8a22c57416939fcb9726b196f82c1c9d399c2d9c0c075c0b7652c3429001cbe", 0x3c, 0x10000}, {&(0x7f0000001540)="654aefd4dbe39c532dd11439bbf2c7fdeb3abcba2041fe0c41851056032f1a8fb4", 0x21, 0x603c}], 0x100, &(0x7f0000001680)={[{@delalloc}], [{@euid_lt={'euid<', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]})
execveat(r3, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x100)

[  225.551166] loop1: detected capacity change from 0 to 264192
[  225.567107] loop1: detected capacity change from 0 to 264192
04:13:05 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000006340), 0x4)
sendmmsg$inet(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010101}}}], 0x20}}], 0x2, 0x0)

[  225.595326] tmpfs: Unknown parameter 'nl80211'
[  225.623163] loop7: detected capacity change from 0 to 2560
04:13:05 executing program 0:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

[  225.626025] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.675479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.695917] ext4 filesystem being mounted at /syzkaller-testdir459551138/syzkaller.4GQ1Wz/11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
04:13:05 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:05 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x6002, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1000000000000021, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x44, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x14080, 0x104, 0x7, 0x0, 0x2, 0x800102, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0x40013, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffcb3, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)={0xff, 0x4, 0x4, 0x7fff, 0x5, [{0x4, 0x0, 0x4, '\x00', 0x4988}, {0x80, 0x8000, 0x851c, '\x00', 0x2000}, {0x6, 0x101, 0x5, '\x00', 0x2680}, {0x8, 0x1ff, 0x400, '\x00', 0x4}, {0x7cb8ba01, 0xef, 0x8, '\x00', 0x902}]})
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  225.770521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
04:13:14 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x6002, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1000000000000021, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x44, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x14080, 0x104, 0x7, 0x0, 0x2, 0x800102, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0x40013, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffcb3, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)={0xff, 0x4, 0x4, 0x7fff, 0x5, [{0x4, 0x0, 0x4, '\x00', 0x4988}, {0x80, 0x8000, 0x851c, '\x00', 0x2000}, {0x6, 0x101, 0x5, '\x00', 0x2680}, {0x8, 0x1ff, 0x400, '\x00', 0x4}, {0x7cb8ba01, 0xef, 0x8, '\x00', 0x902}]})
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:13:14 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x27, 0x0, &(0x7f0000000040)=[r3]}, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
clock_getres(0x5, &(0x7f0000000000))
semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x800}, {0x0, 0x1f, 0x1000}], 0x2, &(0x7f0000000280)={0x77359400})

04:13:14 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/118, 0x76)

04:13:14 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:14 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:14 executing program 5:
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1e}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x1100)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x500001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, @out_args}, './file1\x00'})
setresuid(0x0, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}], [{@measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '(,'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/net/tun\x00'}}, {@dont_measure}, {@fowner_lt={'fowner<', r2}}]}})
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r7, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r8, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {r6, r3}}, './file0\x00'})

04:13:14 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, 0xffffffffffffffff, 0x0)

04:13:14 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000b40)={<r2=>0x0, 0x100000000})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000f40)={0x4, 0x0, {0x3, @usage=0x20, 0x0, 0x8, 0x4, 0x62a6, 0x6, 0x380000000000, 0x21, @usage=0x9, 0x6, 0x2, [0xfdfffffffffffff7, 0x4, 0x0, 0x1846, 0x0, 0x9]}, {0x3, @usage, 0x0, 0x0, 0x7fff, 0x33, 0x8, 0x5, 0x40, @struct={0x10000, 0x9}, 0x9, 0x8, [0x4, 0x9, 0x8000, 0x8, 0x5, 0x800]}, {0x2, @usage=0x7f, r2, 0x8, 0x800, 0x8, 0x6, 0x9, 0x0, @struct={0x8}, 0x8e92, 0xcb, [0x4, 0x9, 0x4, 0x8, 0x3, 0x1]}, {0x0, 0x2, 0x1}})
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

[  234.558510] loop6: detected capacity change from 0 to 6
04:13:14 executing program 4:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:14 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:24 executing program 4:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:24 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x27, 0x0, &(0x7f0000000040)=[r3]}, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
clock_getres(0x5, &(0x7f0000000000))
semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x800}, {0x0, 0x1f, 0x1000}], 0x2, &(0x7f0000000280)={0x77359400})

04:13:24 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:13:24 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x6002, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1000000000000021, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x44, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x14080, 0x104, 0x7, 0x0, 0x2, 0x800102, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0x40013, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffcb3, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)={0xff, 0x4, 0x4, 0x7fff, 0x5, [{0x4, 0x0, 0x4, '\x00', 0x4988}, {0x80, 0x8000, 0x851c, '\x00', 0x2000}, {0x6, 0x101, 0x5, '\x00', 0x2680}, {0x8, 0x1ff, 0x400, '\x00', 0x4}, {0x7cb8ba01, 0xef, 0x8, '\x00', 0x902}]})
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

04:13:24 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:24 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, 0x3, 0x0, 0x0, 0x0, 0xc4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_destroy(0x0)
write(0xffffffffffffffff, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3a", 0x18a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r1, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
close(r1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000cb8f0800000058b4ba0bc97e", @ANYRES32=<r2=>r0, @ANYBLOB="ff000000060000002e2f66696c653000"])
write$P9_RLCREATE(r2, &(0x7f0000000100)={0x18, 0xf, 0x1, {{0x20, 0x1, 0x5}}}, 0x18)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
syz_open_dev$vcsa(&(0x7f0000000140), 0x8, 0x48201)

04:13:24 executing program 5:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000b00)="2c5da661d9641793ad36b7ab341a7af1376f467bef92676398bdfcb38e7cd7831a3b8b0b3f4753f17460780c3e7b6b3aa8dd60e41599345abd5b0b150e336a2265e15b4adbe98c88cd8f0c5f856526b5957c82bf577926e860056cd48aee41d9ae79033ce78a6f24f8abf1d6fcec6b364a62b3cd9fc671f9b9d1a66633aff0c81f94f7f280535850800e80adc858ba3a0cf65ce1703d66c40515c9dbacede1970e0d2eaeb5b8ee6a6be84192975530027bb3d38cf5f123419c91f0349be05c3cf061adacac582d473d739a55652eaef08e691e8b18c5a14086c1fcf96bdd9be7f20dec1bff6eb0f284fa3886df0086781a5a88ee7deaf58a52452bc721a1335e13f4db7c3fde1a4d3738c70e7469f2829fe939b723d3a001ff50f5a9904d4e6f030296f80c6d90f833727600aebbb8798ce30e26ea073bd44ea5d9937e19507366a0960b26c59e8eb77b2c98d4226d008fbae17607a83504d7d383aae14f5ba4b15c44ab3114bea58c802bc9f8b9359fbf387360fffdf0c3ca70ccc10eb486d9dedfdca16981baf77200a829825b0e2e1b4770d361ce0f2d6544557f37a7a488c772d797343c3854bb317e627d6351f316d8fce611636dc1b2d0b06ff16428f5bbf41dea5ffe7a682414652f61a97b792c8e8671ae034617080a99dd7b2d139980789ad9718c7c2f01d9b9119b48ce5447908aa05ce88652f46d031de46586cc45e31086202e24bb0f83c084e22496e5d6273505a63f1f966919ba2c29f77db99ac87b8401ecca5ec656f325d88ef76cbf1775327824f99b13f34d1e91e30d562b564f8155b02c8e0e3a1583935b2c55b0359eb0e51b9940644b20c9bfe3f1995e351bbbda1e3ce23b8f7eb8c55c409214f7d8333d987756628833ba46cf3d50da4b43b3a853ef6523427d0b3d7aee2eb73fc3f13a9edb77527d15b65dec7e741076924bbdee57ddbd71a3dbe55d5d3a0449312e115b24985a28050950bf3dff6d1915e3708088656da4a6ac5c5c9b73576ec2bdb1d1f8343aca7a99de51729b0e238106c40753c72588b7613636671f90dc590a16d8518244cbb466fe7ddfdd62753e3f594a53f13a35009b721567027f18700578446fc14d00b75b643f60874783d3e25ed4865d0a036f1f5bd8e80b23b954934aa22c5120c2505f037376ea7aab3275a029167d954b7a2d1f185b28b1b445cd6c4a3b7fd339023624c7ba40498bb2dd8fff68d0792c5a9532b266908397ec3f8f7a1f3b3330380e0614cb4495aaf0e5a0cd90abc9d989e276ff49ca33e8712ebae3273e0afdd6fb248eee54cf4e4ae9b7d92c93f27f15ead9cbed0e2ef2ec99f4f2f32eb0401b852a41020e9648f56343cf00b11886f1fec3865efd38e07a14e1614352d63a66b561e2367952330f2b3e6bc86a34e2f4fdf5ed808de37ef6e3d4d434b90b7a08ef09dbbe2e9268748e474e2d0cb3c32d31ca5071f6b55f5b50a3c60c06c1eba5f1009b0a22f79d03d004f3ad93d5b32f1905e0b98c15cdf482e6a4eb8e67a3e1eb4d6e726884bd92c520c7d12e2adad4eca7d2c8bd7a044c8f5d267b0aeb99695f93a6e5a10cc13b66fb90064a0294bde45abbac90677f91581cae96d2ea3359838db06c0059fe1ced2b59d9e6922655119dfe808b5c0bdc68099968a49f16f81bc584557420836ac6dee77235781f806a5751e39e8a6efe2f05501a91de1348d5ceca654b434aadc7b830d52ebe2ff9e1e26bd416066f7b32fcbb26623a4c4038cd00d638487c942267d0c667955445a42f5011eeb815254ac91ae31be8499952e97461900376cab3d12bb1f12aaf56ee4c6615c278c49685e96ce78734b9cd7ef00750de0fca43ccd02b2c79aa6798014e9b0e6291b95bb5a2fc27e75e4f4d0d6b777cc7af96d3b9893a6c10171f051821b48e0245dec8a89e714916f9de41d26987af2b33b944a5d9b118b63feb34dc74fba864ba7cc7b3aa6b51544abaef2224ba42f3133b62ef2da30ca0d65953b45c75bc8fb9ad92669058aafaa9e285588414e8fb368f807d921f17fef01944173321ad07296650d6111966466f7a56a43111912c293c4b8e2e6e2193bd38a87b87345be9e330893d42d76b085ef73efff5aeb06ac1f6551c008c66ef3cc32eb73816cb0a21baaa4e068e0ed1646b4f6a321da5e13d02ffdc23f6add69bfd34721dd7829082f010bea5c45a62324635812f4f74ac0a6e27d954e91d000e26b790054f0488bf89df242d147e03b3111cf9e484156196a0e59a206b675cc9534c42faeb045f46a679a88dbef3788b1f0e0ef3e0e3206ab96c0ff7cc7efcda270f0b23da7d658a8e09e76be6b7daa1e4dc35787f1ea002bd4ccba657ff260879d4f503dd4757c107bd489418317343b845a022cede404d4b73b22d6286d4d47dce2c2a4cd16200831edea40e2a03975978d7bd18c2b9c964cc4c66186469da2d5fb060dea1f9acbb95683cc4400bc716bc352bf435b5e8ff1eb5961bbefe2eb408dbfd76390c759e5e5eb66930050634def43b8e8beb8d8b81883578c487f1e5d6a7bb15bb2f4f3b32042d3d888ce9e3d2023d8322c5db30b7c8ee7af319912b2717ec04667a1b86a024947b4c574c4f5f8591db874d0453ac46f5f47b1457f8b54c49f573cd76bbeaafb404864fa662a636b65c7c08d610594bd33fb01e27e10e5b7408a35be5013f557cde54b3b6a7a5001373b88c30cd5bda13985f624139e62bd087e1af5a5e73efc8ce3e5e7655873f6d7fa5f6ee94c047830029489249d06754b1d1231e15f41224767880b3165038b3da77041b4428f88fbcc469eecc36edd2667d7c36901876b7b86caf23ca4f836ba2d2b4350eaac20b486417651bca19abe884ef637a65ae0d411567e1b30c8df0e57170", 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44800)
unlink(&(0x7f0000000040)='./file0\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r2, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x40000004})
flock(r2, 0x17)
sendfile(r0, r1, 0x0, 0xfdef)

04:13:24 executing program 7:
uname(0x0)
uname(&(0x7f00000000c0)=""/250)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r1, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
fremovexattr(r1, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00')
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

04:13:24 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:24 executing program 4:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

[  245.163958] loop6: detected capacity change from 0 to 6
04:13:24 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:13:25 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:25 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 1)

04:13:25 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x21)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x4800, 0x0)
ioctl$CDROMPLAYBLK(r1, 0x5317, 0x0)
r2 = memfd_secret(0x0)
ftruncate(r2, 0x6)
ftruncate(r2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b)

04:13:25 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x6002, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1000000000000021, 0x10080, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x44, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x14080, 0x104, 0x7, 0x0, 0x2, 0x800102, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0x40013, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffcb3, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)={0xff, 0x4, 0x4, 0x7fff, 0x5, [{0x4, 0x0, 0x4, '\x00', 0x4988}, {0x80, 0x8000, 0x851c, '\x00', 0x2000}, {0x6, 0x101, 0x5, '\x00', 0x2680}, {0x8, 0x1ff, 0x400, '\x00', 0x4}, {0x7cb8ba01, 0xef, 0x8, '\x00', 0x902}]})
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  245.456499] FAULT_INJECTION: forcing a failure.
[  245.456499] name failslab, interval 1, probability 0, space 0, times 1
04:13:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12014000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008085}, 0x4000000)
read(0xffffffffffffffff, &(0x7f0000000000)=""/185, 0xb9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\b\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000130000000c0001c00800030003000000df913c435a47585eece23f79226bed9dd651efa07c3913975e7033620de19a5b45e5e13a0b593177946a0451e9f8ce5f680850b24a483d634dbc2e5e38cd9b405c1b43b13a5c0733bb087ddec1f59073c2a0162cb6b32c20df5c18eaa9798e9130d0a26555cafd2adb1a33f1bff66fd42b7f526192ae94cbeb59fd51f6d0779792aa7771e515fd5e65b8274ae9c1f947c81f063b5b2bb4fa338eea06506af608a58c91fe45cfc46003bb9deda8af05a4a6da1b651626ad302b2cb414a9071bc29cd6e07b9e7cabb00df1281db1af8dfbf3856e6458fd0bc840693453dcc349"], 0x20}}, 0x0)

[  245.476293] CPU: 0 UID: 0 PID: 5429 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  245.476341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  245.476355] Call Trace:
[  245.476363]  <TASK>
[  245.476373]  dump_stack_lvl+0xfa/0x120
[  245.476424]  should_fail_ex+0x4d7/0x5e0
[  245.476469]  ? vm_area_dup+0x25/0x6f0
[  245.476489]  should_failslab+0xc2/0x120
[  245.476516]  kmem_cache_alloc_noprof+0x80/0x760
[  245.476558]  ? __pfx_shm_may_split+0x10/0x10
[  245.476590]  ? vm_area_dup+0x25/0x6f0
[  245.476609]  vm_area_dup+0x25/0x6f0
[  245.476627]  ? __pfx_shm_may_split+0x10/0x10
[  245.476659]  __split_vma+0x179/0xdc0
[  245.476695]  ? __pfx___split_vma+0x10/0x10
[  245.476744]  vms_gather_munmap_vmas+0x178/0xc80
[  245.476784]  __mmap_region+0x479/0x26e0
[  245.476816]  ? __lock_acquire+0x3f0/0x2250
[  245.476850]  ? __pfx___mmap_region+0x10/0x10
[  245.476889]  ? get_page_from_freelist+0x507/0x3180
[  245.476923]  ? lock_release+0xc8/0x270
[  245.476952]  ? kernel_init_pages+0x12/0xc0
[  245.476977]  ? get_page_from_freelist+0x21a5/0x3180
[  245.477033]  ? __alloc_frozen_pages_noprof+0x43f/0x2070
[  245.477108]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  245.477141]  ? lock_is_held_type+0x9e/0x120
[  245.477167]  mmap_region+0x314/0x3e0
[  245.477206]  do_mmap+0xa36/0x11d0
[  245.477238]  ? __pfx_do_mmap+0x10/0x10
[  245.477265]  ? __pfx_down_write_killable+0x10/0x10
[  245.477300]  __do_sys_remap_file_pages+0x966/0xab0
[  245.477340]  ? __might_fault+0xe0/0x190
[  245.477363]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  245.477391]  ? __might_fault+0x138/0x190
[  245.477413]  ? lock_release+0xc8/0x270
[  245.477441]  ? __might_fault+0xe0/0x190
[  245.477464]  ? find_held_lock+0x2b/0x80
[  245.477483]  ? syscall_trace_enter+0x209/0x230
[  245.477508]  ? lock_release+0xc8/0x270
[  245.477544]  do_syscall_64+0xbf/0x420
[  245.477572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.477595] RIP: 0033:0x7f27390b2b19
[  245.477614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  245.477635] RSP: 002b:00007f2736628188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  245.477657] RAX: ffffffffffffffda RBX: 00007f27391c5f60 RCX: 00007f27390b2b19
[  245.477672] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  245.477686] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  245.477699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.477712] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  245.477741]  </TASK>
04:13:25 executing program 5:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000b00)="2c5da661d9641793ad36b7ab341a7af1376f467bef92676398bdfcb38e7cd7831a3b8b0b3f4753f17460780c3e7b6b3aa8dd60e41599345abd5b0b150e336a2265e15b4adbe98c88cd8f0c5f856526b5957c82bf577926e860056cd48aee41d9ae79033ce78a6f24f8abf1d6fcec6b364a62b3cd9fc671f9b9d1a66633aff0c81f94f7f280535850800e80adc858ba3a0cf65ce1703d66c40515c9dbacede1970e0d2eaeb5b8ee6a6be84192975530027bb3d38cf5f123419c91f0349be05c3cf061adacac582d473d739a55652eaef08e691e8b18c5a14086c1fcf96bdd9be7f20dec1bff6eb0f284fa3886df0086781a5a88ee7deaf58a52452bc721a1335e13f4db7c3fde1a4d3738c70e7469f2829fe939b723d3a001ff50f5a9904d4e6f030296f80c6d90f833727600aebbb8798ce30e26ea073bd44ea5d9937e19507366a0960b26c59e8eb77b2c98d4226d008fbae17607a83504d7d383aae14f5ba4b15c44ab3114bea58c802bc9f8b9359fbf387360fffdf0c3ca70ccc10eb486d9dedfdca16981baf77200a829825b0e2e1b4770d361ce0f2d6544557f37a7a488c772d797343c3854bb317e627d6351f316d8fce611636dc1b2d0b06ff16428f5bbf41dea5ffe7a682414652f61a97b792c8e8671ae034617080a99dd7b2d139980789ad9718c7c2f01d9b9119b48ce5447908aa05ce88652f46d031de46586cc45e31086202e24bb0f83c084e22496e5d6273505a63f1f966919ba2c29f77db99ac87b8401ecca5ec656f325d88ef76cbf1775327824f99b13f34d1e91e30d562b564f8155b02c8e0e3a1583935b2c55b0359eb0e51b9940644b20c9bfe3f1995e351bbbda1e3ce23b8f7eb8c55c409214f7d8333d987756628833ba46cf3d50da4b43b3a853ef6523427d0b3d7aee2eb73fc3f13a9edb77527d15b65dec7e741076924bbdee57ddbd71a3dbe55d5d3a0449312e115b24985a28050950bf3dff6d1915e3708088656da4a6ac5c5c9b73576ec2bdb1d1f8343aca7a99de51729b0e238106c40753c72588b7613636671f90dc590a16d8518244cbb466fe7ddfdd62753e3f594a53f13a35009b721567027f18700578446fc14d00b75b643f60874783d3e25ed4865d0a036f1f5bd8e80b23b954934aa22c5120c2505f037376ea7aab3275a029167d954b7a2d1f185b28b1b445cd6c4a3b7fd339023624c7ba40498bb2dd8fff68d0792c5a9532b266908397ec3f8f7a1f3b3330380e0614cb4495aaf0e5a0cd90abc9d989e276ff49ca33e8712ebae3273e0afdd6fb248eee54cf4e4ae9b7d92c93f27f15ead9cbed0e2ef2ec99f4f2f32eb0401b852a41020e9648f56343cf00b11886f1fec3865efd38e07a14e1614352d63a66b561e2367952330f2b3e6bc86a34e2f4fdf5ed808de37ef6e3d4d434b90b7a08ef09dbbe2e9268748e474e2d0cb3c32d31ca5071f6b55f5b50a3c60c06c1eba5f1009b0a22f79d03d004f3ad93d5b32f1905e0b98c15cdf482e6a4eb8e67a3e1eb4d6e726884bd92c520c7d12e2adad4eca7d2c8bd7a044c8f5d267b0aeb99695f93a6e5a10cc13b66fb90064a0294bde45abbac90677f91581cae96d2ea3359838db06c0059fe1ced2b59d9e6922655119dfe808b5c0bdc68099968a49f16f81bc584557420836ac6dee77235781f806a5751e39e8a6efe2f05501a91de1348d5ceca654b434aadc7b830d52ebe2ff9e1e26bd416066f7b32fcbb26623a4c4038cd00d638487c942267d0c667955445a42f5011eeb815254ac91ae31be8499952e97461900376cab3d12bb1f12aaf56ee4c6615c278c49685e96ce78734b9cd7ef00750de0fca43ccd02b2c79aa6798014e9b0e6291b95bb5a2fc27e75e4f4d0d6b777cc7af96d3b9893a6c10171f051821b48e0245dec8a89e714916f9de41d26987af2b33b944a5d9b118b63feb34dc74fba864ba7cc7b3aa6b51544abaef2224ba42f3133b62ef2da30ca0d65953b45c75bc8fb9ad92669058aafaa9e285588414e8fb368f807d921f17fef01944173321ad07296650d6111966466f7a56a43111912c293c4b8e2e6e2193bd38a87b87345be9e330893d42d76b085ef73efff5aeb06ac1f6551c008c66ef3cc32eb73816cb0a21baaa4e068e0ed1646b4f6a321da5e13d02ffdc23f6add69bfd34721dd7829082f010bea5c45a62324635812f4f74ac0a6e27d954e91d000e26b790054f0488bf89df242d147e03b3111cf9e484156196a0e59a206b675cc9534c42faeb045f46a679a88dbef3788b1f0e0ef3e0e3206ab96c0ff7cc7efcda270f0b23da7d658a8e09e76be6b7daa1e4dc35787f1ea002bd4ccba657ff260879d4f503dd4757c107bd489418317343b845a022cede404d4b73b22d6286d4d47dce2c2a4cd16200831edea40e2a03975978d7bd18c2b9c964cc4c66186469da2d5fb060dea1f9acbb95683cc4400bc716bc352bf435b5e8ff1eb5961bbefe2eb408dbfd76390c759e5e5eb66930050634def43b8e8beb8d8b81883578c487f1e5d6a7bb15bb2f4f3b32042d3d888ce9e3d2023d8322c5db30b7c8ee7af319912b2717ec04667a1b86a024947b4c574c4f5f8591db874d0453ac46f5f47b1457f8b54c49f573cd76bbeaafb404864fa662a636b65c7c08d610594bd33fb01e27e10e5b7408a35be5013f557cde54b3b6a7a5001373b88c30cd5bda13985f624139e62bd087e1af5a5e73efc8ce3e5e7655873f6d7fa5f6ee94c047830029489249d06754b1d1231e15f41224767880b3165038b3da77041b4428f88fbcc469eecc36edd2667d7c36901876b7b86caf23ca4f836ba2d2b4350eaac20b486417651bca19abe884ef637a65ae0d411567e1b30c8df0e57170", 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44800)
unlink(&(0x7f0000000040)='./file0\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r2, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x40000004})
flock(r2, 0x17)
sendfile(r0, r1, 0x0, 0xfdef)

04:13:35 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 2)

04:13:35 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:13:35 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x27, 0x0, &(0x7f0000000040)=[r3]}, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
clock_getres(0x5, &(0x7f0000000000))

04:13:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffffd)
mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)

04:13:35 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

04:13:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000280)="157d5b393dd52f8ae1302a6806f3e5bb85fee796e266b166b07c2f5c36fa8738058ed7cd5be8c81311324121f597665bc508eb319023bcc07920f12474ce78e1c094f66b89ad1bdf029714bd3b20d2a729869392d41a43660801035f9004bdf41f11fc3357c5d17bcdfb546419aae1c2644228323fb3b3a30130cf6925bed671b89cfd094967c2020e9093849e358687389bda54d38ae6162b51f5e765908b2c7e579722d6ca0ad08b654919c54084cb9500990431953af86703cc8088782033ced422a4a01ed759355c96f25abb12620be5", 0xd2)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x4, &(0x7f0000000080)=[{&(0x7f0000010000)}, {0x0}, {0x0}, {&(0x7f0000000140)="9e6fdd6910e8e48aa180e7d9e54e0581f4e1cf3b4b81b390f43525f6af840e1fed9b9a35d2aa97d77bf36c677d027606d098b1ea9262844b9490d56351e35f6ac84ed2d9d6e20d54546f3db64ef8f3da95462f22acbe0e00bba125fd7237834210b7211e018cfe45137fb11520574540167f39e34ca1e7e15a548feb2c81c9e9fc397d36f895e1521b85ff053e22312f6fa4c203d0b1252ba8bafd9bde417ea859d9589ce57575a80bc5137117fb", 0xae, 0x1000}], 0x0, &(0x7f0000011700))

04:13:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x0)
pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="a79b63d030c96c028abea2a8a5f71fcc76328f28765d5863219ca62614e3824ce0bb83ffc6b6119fcb04ea0c69657a3ea72921e3335d6d029db093591361b411579008556cd58c7851e43b68896c98830559a9c9ed018e7f7d5617ee6a6b84c7099787ab389e184f49a594d5d8c9f5170e4eb1ed90183fa0211814cd7e660ecaa3b7f770f09c5c98df6ec6dec0ac6ece234cf3ed36cc06b424f96509174c9f039d3e21fc988f1e55dc85b7dfe39d9bac5beee1e7acc8decea8c1ee309b178d3401cfb49edc75e5df70906096cd5b2cf51dccd5d1ca6c8ff969cd4a978fa19b0be3b835adfc384eab9ce97b9d4f8c3e3b", 0xf0}, {&(0x7f0000000100)="0e1699d8fe881139f4f9633cc27027f86bbb394cac184928b8bb0b21c084ce4e13c1c743961aaa659c8698d7b71ec286142cfd9c2c7edb0170397d6413b63d0f32240ad400"/79, 0x87}, {&(0x7f0000000180)="366c43a8b1efa61021e657d33ce9b7b09937e6bf381b5c0ded0df110e2f5949283617e10073aedd94f3de3fbda7da30a4783e4de83a939ad317eaf22d8cc4b844e219dd96fbac74e55e80d23bd04a65403c37fcdf59c9cc8e310cb62be276794c055072a0e44fdbee8c9", 0x6a}], 0x3, 0x0, 0x6, 0x1)

04:13:35 executing program 7:
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000000180))
mkdirat(r0, &(0x7f0000000500)='./file0\x00', 0x5)
clone3(&(0x7f0000000440)={0x100000000, &(0x7f00000000c0), &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000240), {0x2a}, &(0x7f0000000280)=""/184, 0xb8, &(0x7f00000003c0)=""/13, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB='@\x00\x00./file'])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x1, 0x5, 0x9, 0x0, 0x0, 0x2180, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x67, 0x1, @perf_bp, 0x9100, 0x10000, 0x1, 0x8, 0x10001, 0xac, 0x1, 0x0, 0x20b78643, 0x0, 0x9}, r1, 0x9, r2, 0x3)

[  256.121076] loop1: detected capacity change from 0 to 16
[  256.125174] FAT-fs (loop7): unable to read boot sector
[  256.128946] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[  256.142153] loop1: detected capacity change from 0 to 16
04:13:35 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

[  256.149130] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[  256.163139] loop6: detected capacity change from 0 to 6
[  256.185993] Zero length message leads to an empty skb
04:13:35 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, @nfc={0x27, 0x0, 0x0, 0x6}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r1, 0x0)
eventfd(0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r2, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
syz_mount_image$msdos(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x51, 0x2, &(0x7f0000000640)=[{&(0x7f0000000500)="2613e5ab474bd73e80c7f3575d909c5763040d9f8f759e7d5bd92307a93559266e26be68ec", 0x25, 0x7}, {&(0x7f0000000540)="c6716edbd14337a3e7fc452ce7e5b665bf59f1b0575e21f11c0e9e541ce803344263244740d2e9a314b4d06e3d400a09a3bf1d17943e2a1b9aed52e05184cf250c65ee8b8b1b3e73866cfe8540cf683ced8880473b7e30ec44a497253fddc64d6a8883e5ac041ff8ba4df6dd8884424a90becf3b9ed2499ecd9461abffd8307e79b054524fd18f0fa13d5cf0facfc8593f25747b359d5b242304b0f9e89c19ca513dce904f2294ba19d4a62a71e1d7ea0d1d99099cfbad445e3b28e47533d379e3f19a15c25cbfb5bf746cd94a077c92e9b10fedb4010b94881b3b8e370e909ac22a5a1246326781d53b2e643456", 0xee, 0x100}], 0x80, &(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c7b682c7365636c6162656c2e7384626a5f726f6c9e767b2c6649ad662175e86303262b212b405e5d3a2c00"])
syz_open_dev$vcsn(&(0x7f0000000840), 0xb6a, 0x4802)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r4, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r5, 0x0)
io_submit(0x0, 0x0, &(0x7f0000001ac0))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r6)
write$binfmt_aout(r0, &(0x7f0000000000)={{0x107, 0x1, 0x0, 0x39a, 0x206, 0x3, 0x57, 0x7fffffff}, "ec9dc1803a883334e0efeb7646480077f3ad63fac8b18080542839dd8ca63791612c26e816edccf7d7b47f13e35b409ffb4c3c"}, 0x53)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000140), 0x4)

04:13:35 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 3)

04:13:35 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xad00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001009bbed4670000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_io_uring_setup(0x1f09, &(0x7f00000000c0)={0x0, 0xc44c, 0x2, 0x3, 0xb6, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x14, 0x0, r1)

[  256.292024] loop1: detected capacity change from 0 to 1
[  256.304681] msdos: Unknown parameter 'smackfshat'
[  256.317068] FAT-fs (loop7): unable to read boot sector
04:13:36 executing program 5:
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @remote}})
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)

[  256.339936] loop1: detected capacity change from 0 to 1
[  256.361518] msdos: Unknown parameter 'smackfshat'
[  256.407542] FAULT_INJECTION: forcing a failure.
[  256.407542] name failslab, interval 1, probability 0, space 0, times 0
[  256.413673] CPU: 0 UID: 0 PID: 5491 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  256.413708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  256.413721] Call Trace:
[  256.413729]  <TASK>
[  256.413738]  dump_stack_lvl+0xfa/0x120
[  256.413772]  should_fail_ex+0x4d7/0x5e0
[  256.413818]  ? mas_preallocate+0xb3d/0xd90
[  256.413848]  should_failslab+0xc2/0x120
[  256.413875]  kmem_cache_alloc_noprof+0x80/0x760
[  256.413923]  ? mas_preallocate+0xb3d/0xd90
[  256.413953]  mas_preallocate+0xb3d/0xd90
[  256.414006]  ? __pfx_mas_preallocate+0x10/0x10
[  256.414051]  ? lockdep_init_map_type+0x4b/0x220
[  256.414093]  __split_vma+0x304/0xdc0
[  256.414131]  ? __pfx___split_vma+0x10/0x10
[  256.414188]  vms_gather_munmap_vmas+0x178/0xc80
[  256.414233]  __mmap_region+0x479/0x26e0
[  256.414276]  ? __pfx___mmap_region+0x10/0x10
[  256.414327]  ? get_page_from_freelist+0x507/0x3180
[  256.414361]  ? lock_release+0xc8/0x270
[  256.414392]  ? kernel_init_pages+0x12/0xc0
[  256.414420]  ? get_page_from_freelist+0x21a5/0x3180
[  256.414486]  ? perf_trace_lock_acquire+0xc9/0x700
[  256.414576]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  256.414610]  ? lock_is_held_type+0x9e/0x120
[  256.414637]  mmap_region+0x314/0x3e0
[  256.414681]  do_mmap+0xa36/0x11d0
[  256.414716]  ? __pfx_do_mmap+0x10/0x10
[  256.414746]  ? __pfx_down_write_killable+0x10/0x10
[  256.414783]  __do_sys_remap_file_pages+0x966/0xab0
[  256.414828]  ? __might_fault+0xe0/0x190
[  256.414854]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  256.414884]  ? __might_fault+0x138/0x190
[  256.414907]  ? lock_release+0xc8/0x270
[  256.414938]  ? __might_fault+0xe0/0x190
[  256.414963]  ? find_held_lock+0x2b/0x80
[  256.414984]  ? syscall_trace_enter+0x209/0x230
[  256.415011]  ? lock_release+0xc8/0x270
[  256.415051]  do_syscall_64+0xbf/0x420
[  256.415081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.415106] RIP: 0033:0x7f27390b2b19
[  256.415124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  256.415148] RSP: 002b:00007f2736628188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  256.415170] RAX: ffffffffffffffda RBX: 00007f27391c5f60 RCX: 00007f27390b2b19
[  256.415186] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  256.415200] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  256.415214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.415227] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  256.415262]  </TASK>
04:13:36 executing program 7:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0)
chroot(&(0x7f0000000140)='./file0\x00')
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x12030, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}, {@access_any}, {@aname={'aname', 0x3d, 'hfs\x00'}}], [{@uid_lt}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/nullb0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '($-+'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@dont_hash}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, 'hfs\x00'}}]}})
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
mount(&(0x7f0000000180)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hfs\x00', 0xc08, &(0x7f0000000240)='devpts\x00')
chroot(&(0x7f00000004c0)='./file0\x00')
fchmodat(r0, &(0x7f0000000280)='./file0\x00', 0x26)

04:13:36 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000000080)="ed41000000080000da97ad84334ddc240d024771a6c44229f4655fddf4655fddf4655f", 0x23, 0x2100}], 0x0, &(0x7f0000014100)=ANY=[@ANYBLOB="fe"])

[  256.470152] devpts: Unknown parameter 'trans'
[  256.503213] loop1: detected capacity change from 0 to 2048
[  256.524289] devpts: Unknown parameter 'trans'
04:13:36 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:13:36 executing program 5:
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @remote}})
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)

[  256.552660] ext4: Unknown parameter 'þ'
[  256.563704] loop1: detected capacity change from 0 to 2048
[  256.571175] ext4: Unknown parameter 'þ'
04:13:45 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 4)

04:13:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001}, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x7873, &(0x7f0000002ac0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f00000003c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
ftruncate(r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0xff, 0x3, 0x0, 0x0, 0xb4d, 0x26240, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0xfffffffffffffff8, 0x81, 0x9, 0x9, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xc, r0, 0x1)

04:13:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write(0x1, &(0x7f0000000200)={0x1000}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000100)={0x0, 0x1000, 0x0, 0x1, 0x2, 0x1}, 0x10)

04:13:45 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x27, 0x0, &(0x7f0000000040)=[r3]}, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

04:13:45 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:13:45 executing program 1:
ioctl(0xffffffffffffffff, 0x7fff, &(0x7f0000000000)="5d645f749d7432668ca39a76dd07320e338e7d8537977853b2f92b24a634a42c990aef063d69a97d2414f3a158f04b11fd3be768a39ad65dcd17a4baaeab485e603b8a8a6c9f5e59050744e7f33c912d519830a376d42d8242ce8d45b1d6a4404a25b3a6a64d31c0097dc345a1aa70cdb8156401420e53f3e94f395065")
keyctl$set_reqkey_keyring(0xe, 0x4)
request_key(&(0x7f0000001dc0)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000001e40)='k\\\xc5(&}\x00', 0x0)

04:13:45 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 1)

04:13:45 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
fcntl$dupfd(r1, 0x0, r2)
connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e)
recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmmsg$unix(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000380)=""/140, 0x8c}], 0x5, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000001800)=[{&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/94, 0x5e}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/79, 0x4f}], 0x5, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001980)=""/55, 0x37}, {&(0x7f00000019c0)=""/101, 0x65}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/122, 0x7a}, {&(0x7f0000002ac0)=""/233, 0xe9}], 0x5}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002cc0)=""/90, 0x5a}, {&(0x7f0000002d40)=""/132, 0x84}, {&(0x7f0000002e00)=""/99, 0x63}, {&(0x7f0000002e80)=""/147, 0x93}, {&(0x7f0000002f40)=""/119, 0x77}, {&(0x7f0000002fc0)=""/203, 0xcb}, {&(0x7f00000030c0)=""/157, 0x9d}, {&(0x7f0000003180)=""/62, 0x3e}, {&(0x7f00000031c0)=""/9, 0x9}, {&(0x7f0000003200)=""/22, 0x16}], 0xa, &(0x7f0000003300)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000033c0)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000003440)=""/164, 0xa4}, {&(0x7f0000003500)=""/73, 0x49}, {&(0x7f0000003580)=""/100, 0x64}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)}, {&(0x7f0000004640)=""/84, 0x54}, {&(0x7f00000046c0)=""/156, 0x9c}, {&(0x7f0000004780)=""/187, 0xbb}, {&(0x7f0000004840)=""/85, 0x55}], 0x9}}], 0x5, 0x40002321, 0x0)

[  265.980815] FAULT_INJECTION: forcing a failure.
[  265.980815] name failslab, interval 1, probability 0, space 0, times 0
[  265.985494] CPU: 1 UID: 0 PID: 5530 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  265.985512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  265.985520] Call Trace:
[  265.985524]  <TASK>
[  265.985529]  dump_stack_lvl+0xfa/0x120
[  265.985551]  should_fail_ex+0x4d7/0x5e0
[  265.985576]  ? vm_area_dup+0x25/0x6f0
[  265.985588]  should_failslab+0xc2/0x120
[  265.985603]  kmem_cache_alloc_noprof+0x80/0x760
[  265.985627]  ? __pfx_shm_may_split+0x10/0x10
[  265.985645]  ? vm_area_dup+0x25/0x6f0
[  265.985654]  vm_area_dup+0x25/0x6f0
[  265.985664]  ? __pfx_shm_may_split+0x10/0x10
[  265.985681]  __split_vma+0x179/0xdc0
[  265.985701]  ? __pfx___split_vma+0x10/0x10
[  265.985727]  vms_gather_munmap_vmas+0x178/0xc80
[  265.985748]  __mmap_region+0x479/0x26e0
[  265.985766]  ? __lock_acquire+0x3f0/0x2250
[  265.985785]  ? __pfx___mmap_region+0x10/0x10
[  265.985806]  ? get_page_from_freelist+0x507/0x3180
[  265.985823]  ? lock_release+0xc8/0x270
[  265.985839]  ? kernel_init_pages+0x12/0xc0
[  265.985852]  ? get_page_from_freelist+0x21a5/0x3180
[  265.985881]  ? __alloc_frozen_pages_noprof+0x43f/0x2070
[  265.985921]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  265.985940]  ? lock_is_held_type+0x9e/0x120
[  265.985954]  mmap_region+0x314/0x3e0
[  265.985975]  do_mmap+0xa36/0x11d0
[  265.985992]  ? __pfx_do_mmap+0x10/0x10
[  265.986006]  ? __pfx_down_write_killable+0x10/0x10
[  265.986025]  __do_sys_remap_file_pages+0x966/0xab0
[  265.986047]  ? __might_fault+0xe0/0x190
[  265.986059]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  265.986075]  ? __might_fault+0x138/0x190
[  265.986097]  ? lock_release+0xc8/0x270
[  265.986113]  ? __might_fault+0xe0/0x190
[  265.986125]  ? find_held_lock+0x2b/0x80
[  265.986135]  ? syscall_trace_enter+0x209/0x230
[  265.986150]  ? lock_release+0xc8/0x270
[  265.986169]  do_syscall_64+0xbf/0x420
[  265.986184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.986197] RIP: 0033:0x7f98da852b19
[  265.986207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  265.986219] RSP: 002b:00007f98d7dc8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  265.986231] RAX: ffffffffffffffda RBX: 00007f98da965f60 RCX: 00007f98da852b19
[  265.986239] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  265.986246] RBP: 00007f98d7dc81d0 R08: 0000000000000000 R09: 0000000000000000
[  265.986254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.986261] R13: 00007ffd7e0ce3af R14: 00007f98d7dc8300 R15: 0000000000022000
[  265.986277]  </TASK>
04:13:45 executing program 5:
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000014c0)={0x0, 0xd23641f, 0x7})

[  266.054065] loop6: detected capacity change from 0 to 6
04:13:45 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 5)

04:13:45 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 2)

[  266.198716] FAULT_INJECTION: forcing a failure.
[  266.198716] name failslab, interval 1, probability 0, space 0, times 0
[  266.201345] CPU: 1 UID: 0 PID: 5554 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  266.201363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  266.201371] Call Trace:
[  266.201375]  <TASK>
[  266.201379]  dump_stack_lvl+0xfa/0x120
[  266.201404]  should_fail_ex+0x4d7/0x5e0
[  266.201430]  ? vm_area_alloc+0x20/0x170
[  266.201451]  should_failslab+0xc2/0x120
[  266.201466]  kmem_cache_alloc_noprof+0x80/0x760
[  266.201488]  ? __pfx_shm_close+0x10/0x10
[  266.201508]  ? vm_area_alloc+0x20/0x170
[  266.201528]  vm_area_alloc+0x20/0x170
[  266.201547]  __mmap_region+0xc2d/0x26e0
[  266.201566]  ? __lock_acquire+0x3f0/0x2250
[  266.201585]  ? __pfx___mmap_region+0x10/0x10
[  266.201606]  ? get_page_from_freelist+0x507/0x3180
[  266.201623]  ? lock_release+0xc8/0x270
[  266.201655]  ? __alloc_frozen_pages_noprof+0x43f/0x2070
[  266.201696]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  266.201713]  ? lock_is_held_type+0x9e/0x120
[  266.201727]  mmap_region+0x314/0x3e0
[  266.201752]  do_mmap+0xa36/0x11d0
[  266.201772]  ? __pfx_do_mmap+0x10/0x10
[  266.201787]  ? __pfx_down_write_killable+0x10/0x10
[  266.201806]  __do_sys_remap_file_pages+0x966/0xab0
[  266.201827]  ? __might_fault+0xe0/0x190
[  266.201839]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  266.201854]  ? __might_fault+0x138/0x190
[  266.201866]  ? lock_release+0xc8/0x270
[  266.201882]  ? __might_fault+0xe0/0x190
[  266.201893]  ? find_held_lock+0x2b/0x80
[  266.201904]  ? syscall_trace_enter+0x209/0x230
[  266.201919]  ? lock_release+0xc8/0x270
[  266.201938]  do_syscall_64+0xbf/0x420
[  266.201953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.201966] RIP: 0033:0x7f27390b2b19
[  266.201976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  266.201991] RSP: 002b:00007f2736628188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  266.202004] RAX: ffffffffffffffda RBX: 00007f27391c5f60 RCX: 00007f27390b2b19
[  266.202013] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  266.202020] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  266.202027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.202034] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  266.202050]  </TASK>
04:13:54 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 6)

04:13:54 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r3, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

04:13:54 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000001580)=ANY=[@ANYBLOB="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"]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r1, 0x8911, &(0x7f00000003c0)={0x0, @rc={0x1f, @none}, @can, @nfc})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r5, 0x1, 0xe, 0x0, &(0x7f0000000280))
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
fcntl$setstatus(r4, 0x4, 0x2000)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000080)={{r4}, r6, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000100)={{r2}, r6, 0x4, @unused=[0x100, 0x3, 0x9, 0x6], @name="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"})

04:13:54 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

04:13:54 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 3)

[  274.621963] FAULT_INJECTION: forcing a failure.
[  274.621963] name failslab, interval 1, probability 0, space 0, times 0
[  274.624417] CPU: 0 UID: 0 PID: 5566 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  274.624434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  274.624442] Call Trace:
[  274.624446]  <TASK>
[  274.624451]  dump_stack_lvl+0xfa/0x120
[  274.624471]  should_fail_ex+0x4d7/0x5e0
[  274.624496]  ? mas_preallocate+0xb3d/0xd90
[  274.624513]  should_failslab+0xc2/0x120
[  274.624528]  kmem_cache_alloc_noprof+0x80/0x760
[  274.624552]  ? mas_preallocate+0xb3d/0xd90
[  274.624567]  mas_preallocate+0xb3d/0xd90
[  274.624585]  ? __pfx_mas_preallocate+0x10/0x10
[  274.624606]  ? lockdep_init_map_type+0x4b/0x220
[  274.624628]  __split_vma+0x304/0xdc0
[  274.624648]  ? __pfx___split_vma+0x10/0x10
[  274.624674]  vms_gather_munmap_vmas+0x178/0xc80
[  274.624696]  __mmap_region+0x479/0x26e0
[  274.624713]  ? __lock_acquire+0x3f0/0x2250
[  274.624730]  ? __pfx___mmap_region+0x10/0x10
[  274.624751]  ? get_page_from_freelist+0x507/0x3180
[  274.624770]  ? lock_release+0xc8/0x270
[  274.624785]  ? kernel_init_pages+0x12/0xc0
[  274.624799]  ? get_page_from_freelist+0x21a5/0x3180
[  274.624829]  ? __alloc_frozen_pages_noprof+0x43f/0x2070
[  274.624869]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  274.624887]  ? lock_is_held_type+0x9e/0x120
[  274.624901]  mmap_region+0x314/0x3e0
[  274.624922]  do_mmap+0xa36/0x11d0
[  274.624939]  ? __pfx_do_mmap+0x10/0x10
[  274.624954]  ? __pfx_down_write_killable+0x10/0x10
[  274.624974]  __do_sys_remap_file_pages+0x966/0xab0
[  274.624995]  ? __might_fault+0xe0/0x190
[  274.625008]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  274.625023]  ? __might_fault+0x138/0x190
[  274.625035]  ? lock_release+0xc8/0x270
[  274.625050]  ? __might_fault+0xe0/0x190
[  274.625062]  ? find_held_lock+0x2b/0x80
[  274.625073]  ? syscall_trace_enter+0x209/0x230
[  274.625087]  ? lock_release+0xc8/0x270
[  274.625106]  do_syscall_64+0xbf/0x420
[  274.625121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.625135] RIP: 0033:0x7f98da852b19
[  274.625145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  274.625157] RSP: 002b:00007f98d7dc8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  274.625169] RAX: ffffffffffffffda RBX: 00007f98da965f60 RCX: 00007f98da852b19
[  274.625177] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  274.625184] RBP: 00007f98d7dc81d0 R08: 0000000000000000 R09: 0000000000000000
[  274.625191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.625198] R13: 00007ffd7e0ce3af R14: 00007f98d7dc8300 R15: 0000000000022000
[  274.625214]  </TASK>
04:13:54 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0xb4eda5cbc2903927, 0x0)
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x0, 0x20})
r1 = getpid()
pidfd_open(r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
perf_event_open(&(0x7f0000000b80)={0x3, 0x80, 0x20, 0x5, 0x7f, 0x3, 0x0, 0xfff, 0x2c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0, 0x4, @perf_config_ext={0x1, 0x81}, 0x495, 0x3, 0x163b, 0x5, 0xd446, 0x5b4, 0x2, 0x0, 0xff, 0x0, 0x4}, r1, 0x0, r2, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

04:13:54 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r6, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

[  274.662472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  274.663068] loop6: detected capacity change from 0 to 6
04:13:54 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

04:13:54 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 7)

04:13:54 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 4)

04:13:54 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013c00)=ANY=[])
rmdir(&(0x7f0000000040)='./file0\x00')

04:13:54 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 5)

[  274.789333] FAULT_INJECTION: forcing a failure.
[  274.789333] name failslab, interval 1, probability 0, space 0, times 0
[  274.790292] CPU: 0 UID: 0 PID: 5593 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  274.790311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  274.790318] Call Trace:
[  274.790323]  <TASK>
[  274.790328]  dump_stack_lvl+0xfa/0x120
[  274.790348]  should_fail_ex+0x4d7/0x5e0
[  274.790373]  ? vm_area_alloc+0x20/0x170
[  274.790395]  should_failslab+0xc2/0x120
[  274.790409]  kmem_cache_alloc_noprof+0x80/0x760
[  274.790431]  ? __pfx_shm_close+0x10/0x10
[  274.790451]  ? vm_area_alloc+0x20/0x170
[  274.790470]  vm_area_alloc+0x20/0x170
[  274.790489]  __mmap_region+0xc2d/0x26e0
[  274.790508]  ? __lock_acquire+0x3f0/0x2250
[  274.790527]  ? __pfx___mmap_region+0x10/0x10
[  274.790548]  ? get_page_from_freelist+0x507/0x3180
[  274.790565]  ? lock_release+0xc8/0x270
[  274.790598]  ? __alloc_frozen_pages_noprof+0x43f/0x2070
[  274.790638]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  274.790656]  ? lock_is_held_type+0x9e/0x120
[  274.790670]  mmap_region+0x314/0x3e0
[  274.790691]  do_mmap+0xa36/0x11d0
[  274.790708]  ? __pfx_do_mmap+0x10/0x10
[  274.790723]  ? __pfx_down_write_killable+0x10/0x10
[  274.790742]  __do_sys_remap_file_pages+0x966/0xab0
[  274.790763]  ? __might_fault+0xe0/0x190
[  274.790775]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  274.790791]  ? __might_fault+0x138/0x190
[  274.790802]  ? lock_release+0xc8/0x270
[  274.790818]  ? __might_fault+0xe0/0x190
[  274.790830]  ? find_held_lock+0x2b/0x80
[  274.790841]  ? syscall_trace_enter+0x209/0x230
[  274.790855]  ? lock_release+0xc8/0x270
[  274.790874]  do_syscall_64+0xbf/0x420
[  274.790889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.790902] RIP: 0033:0x7f98da852b19
[  274.790911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  274.790923] RSP: 002b:00007f98d7dc8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  274.790935] RAX: ffffffffffffffda RBX: 00007f98da965f60 RCX: 00007f98da852b19
[  274.790943] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  274.790950] RBP: 00007f98d7dc81d0 R08: 0000000000000000 R09: 0000000000000000
[  274.790958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.790965] R13: 00007ffd7e0ce3af R14: 00007f98d7dc8300 R15: 0000000000022000
[  274.790981]  </TASK>
[  274.809024] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
04:13:54 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 8)

04:13:54 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

[  274.863549] loop5: detected capacity change from 0 to 4
04:13:54 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 6)

[  274.893169] EXT4-fs (loop5): can't read group descriptor 0
[  274.914748] loop5: detected capacity change from 0 to 4
[  274.933818] EXT4-fs (loop5): can't read group descriptor 0
[  277.541121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  277.544848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  277.546746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  277.550277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  277.553088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.575476] Bluetooth: hci0: command tx timeout
[  281.623390] Bluetooth: hci0: command tx timeout
[  283.671441] Bluetooth: hci0: command tx timeout
[  285.719463] Bluetooth: hci0: command tx timeout
[  292.736620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.737732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.806869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.808925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
04:14:22 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:14:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"])
mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4)
r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2)
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31)
fchown(r1, 0x0, 0x0)
renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000065680)={0x5, [], 0x7, "70c6d8b2c5d315"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059780)={0x0, ""/256, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059980)=ANY=[@ANYRES64=<r4=>0x0, @ANYBLOB="0600000000000000030000000000000009000000000000000100000020000000dd2416fc00d5d90000000500000000000100f9ffffff040000000200000000000000cabcffffffffffff4c0600000000000900000000000000ff010000000000001000"/120])
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059a00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4}], 0x3f, "b056043c053587"})
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r5 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000)
dup3(r2, r5, 0x0)
mknodat$null(r5, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103)
fchown(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x204a83, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r6, 0x0)
syz_io_uring_submit(r7, 0x0, 0x0, 0x0)
fork()

04:14:22 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 7)

04:14:22 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 9)

04:14:22 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="840100001000cb2b0000000000000000000000000000000000000000000000017f00000100"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012006d6f727573313238302d67656e65726963000000000000000300"/316], 0x184}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)

04:14:22 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000040000000a000080"], 0x24}], 0x1}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @xdp={0x2c, 0x9, 0x0, 0xd}, @rc={0x1f, @none, 0xfd}, @vsock={0x28, 0x0, 0x2710, @host}, 0x3, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='veth1_vlan\x00', 0xffffffff, 0x20})

04:14:22 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

04:14:22 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

04:14:22 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)

[  302.555110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  302.569149] FAULT_INJECTION: forcing a failure.
[  302.569149] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  302.570817] loop1: detected capacity change from 0 to 63
[  302.585387] CPU: 0 UID: 0 PID: 6078 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  302.585420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  302.585433] Call Trace:
[  302.585440]  <TASK>
[  302.585449]  dump_stack_lvl+0xfa/0x120
[  302.585481]  should_fail_ex+0x4d7/0x5e0
[  302.585525]  should_fail_alloc_page+0xe0/0x110
[  302.585553]  prepare_alloc_pages+0x1eb/0x550
[  302.585578]  ? mark_held_locks+0x49/0x80
[  302.585611]  __alloc_frozen_pages_noprof+0x185/0x2070
[  302.585645]  ? percpu_counter_add_batch+0x126/0x240
[  302.585682]  ? inode_to_bdi+0x9c/0x140
[  302.585718]  ? vma_wants_writenotify+0x19d/0x350
[  302.585753]  ? __pfx_vma_wants_writenotify+0x10/0x10
[  302.585788]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  302.585821]  ? __pfx_uprobe_mmap+0x10/0x10
[  302.585862]  ? vma_set_page_prot+0xa5/0x120
[  302.585893]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  302.585930]  ? policy_nodemask+0xeb/0x4e0
[  302.585965]  alloc_pages_mpol+0xed/0x340
[  302.585998]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  302.586033]  ? mtree_range_walk+0x74a/0xb90
[  302.586060]  alloc_pages_noprof+0xa1/0x380
[  302.586094]  __pmd_alloc+0x3b/0xad0
[  302.586128]  __handle_mm_fault+0xcf2/0x2f50
[  302.586159]  ? __pfx_mt_find+0x10/0x10
[  302.586184]  ? __pfx___handle_mm_fault+0x10/0x10
[  302.586229]  ? find_vma+0xbf/0x140
[  302.586252]  ? __pfx_find_vma+0x10/0x10
[  302.586281]  handle_mm_fault+0x2d8/0x750
[  302.586325]  __get_user_pages+0x587/0x2fb0
[  302.586371]  ? __pfx___get_user_pages+0x10/0x10
[  302.586405]  ? lock_is_held_type+0x9e/0x120
[  302.586429]  populate_vma_page_range+0x282/0x410
[  302.586464]  ? __pfx_populate_vma_page_range+0x10/0x10
[  302.586495]  ? __pfx_find_vma_intersection+0x10/0x10
[  302.586537]  ? do_mmap+0x6a4/0x11d0
[  302.586566]  __mm_populate+0x100/0x3a0
[  302.586601]  ? __pfx___mm_populate+0x10/0x10
[  302.586637]  ? up_write+0x265/0x4e0
[  302.586674]  __do_sys_remap_file_pages+0x892/0xab0
[  302.586714]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  302.586741]  ? __might_fault+0x138/0x190
[  302.586763]  ? lock_release+0xc8/0x270
[  302.586791]  ? __might_fault+0xe0/0x190
[  302.586813]  ? find_held_lock+0x2b/0x80
[  302.586833]  ? syscall_trace_enter+0x209/0x230
[  302.586857]  ? lock_release+0xc8/0x270
[  302.586892]  do_syscall_64+0xbf/0x420
[  302.586919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.586942] RIP: 0033:0x7f27390b2b19
[  302.586959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  302.586981] RSP: 002b:00007f2736628188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  302.587002] RAX: ffffffffffffffda RBX: 00007f27391c5f60 RCX: 00007f27390b2b19
[  302.587017] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  302.587030] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  302.587043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.587056] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  302.587084]  </TASK>
[  302.591843] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  302.600623] loop6: detected capacity change from 0 to 6
04:14:22 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
recvfrom$unix(r0, &(0x7f0000000180)=""/162, 0xa2, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000553c8557040000000000", @ANYRES32=<r3=>r2, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
sendfile(r1, r2, 0x0, 0xa0103)

04:14:22 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 8)

04:14:22 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:14:22 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)

[  302.683052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
04:14:22 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 10)

04:14:22 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)

04:14:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0/file0\x00'})
write(r1, &(0x7f0000000040)="df43e9", 0x3)

04:14:22 executing program 1:
execve(0x0, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')

04:14:22 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 9)

[  302.841175] FAULT_INJECTION: forcing a failure.
[  302.841175] name failslab, interval 1, probability 0, space 0, times 0
[  302.852209] CPU: 0 UID: 0 PID: 6103 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  302.852242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  302.852254] Call Trace:
[  302.852262]  <TASK>
[  302.852270]  dump_stack_lvl+0xfa/0x120
[  302.852311]  should_fail_ex+0x4d7/0x5e0
[  302.852354]  ? __pmd_alloc+0x98/0xad0
[  302.852383]  should_failslab+0xc2/0x120
[  302.852409]  kmem_cache_alloc_noprof+0x80/0x760
[  302.852443]  ? mtree_range_walk+0x74a/0xb90
[  302.852471]  ? __pmd_alloc+0x98/0xad0
[  302.852499]  __pmd_alloc+0x98/0xad0
[  302.852532]  __handle_mm_fault+0xcf2/0x2f50
[  302.852564]  ? __pfx_mt_find+0x10/0x10
[  302.852589]  ? __pfx___handle_mm_fault+0x10/0x10
[  302.852634]  ? find_vma+0xbf/0x140
[  302.852657]  ? __pfx_find_vma+0x10/0x10
[  302.852687]  handle_mm_fault+0x2d8/0x750
[  302.852723]  __get_user_pages+0x587/0x2fb0
[  302.852772]  ? __pfx___get_user_pages+0x10/0x10
[  302.852808]  ? lock_is_held_type+0x9e/0x120
[  302.852832]  populate_vma_page_range+0x282/0x410
[  302.852869]  ? __pfx_populate_vma_page_range+0x10/0x10
[  302.852902]  ? __pfx_find_vma_intersection+0x10/0x10
[  302.852931]  ? do_mmap+0x6a4/0x11d0
[  302.852960]  __mm_populate+0x100/0x3a0
[  302.852996]  ? __pfx___mm_populate+0x10/0x10
[  302.853032]  ? up_write+0x265/0x4e0
[  302.853073]  __do_sys_remap_file_pages+0x892/0xab0
[  302.853111]  ? __might_fault+0xe0/0x190
[  302.853134]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  302.853162]  ? __might_fault+0x138/0x190
[  302.853184]  ? lock_release+0xc8/0x270
[  302.853212]  ? __might_fault+0xe0/0x190
[  302.853234]  ? find_held_lock+0x2b/0x80
[  302.853254]  ? syscall_trace_enter+0x209/0x230
[  302.853278]  ? lock_release+0xc8/0x270
[  302.853313]  do_syscall_64+0xbf/0x420
[  302.853340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.853363] RIP: 0033:0x7f27390b2b19
[  302.853382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  302.853402] RSP: 002b:00007f2736628188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  302.853424] RAX: ffffffffffffffda RBX: 00007f27391c5f60 RCX: 00007f27390b2b19
[  302.853438] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  302.853452] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  302.853464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  302.853477] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  302.853506]  </TASK>
[  302.903760] FAULT_INJECTION: forcing a failure.
[  302.903760] name fail_page_alloc, interval 1, probability 0, space 0, times 0
04:14:22 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

04:14:22 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x1, 0x80, 0x20, 0x0, 0x0, 0x180, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_config_ext={0x6, 0x81}, 0x0, 0x0, 0x4, 0x0, 0x8, 0x4, 0x5, 0x0, 0x7fffffff, 0x0, 0x10001}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2)
r0 = fork()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0x10, r0)
ptrace(0x20, r0)

[  302.921562] CPU: 0 UID: 0 PID: 6112 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  302.921596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  302.921609] Call Trace:
[  302.921617]  <TASK>
[  302.921625]  dump_stack_lvl+0xfa/0x120
[  302.921658]  should_fail_ex+0x4d7/0x5e0
[  302.921702]  should_fail_alloc_page+0xe0/0x110
[  302.921730]  prepare_alloc_pages+0x1eb/0x550
[  302.921755]  ? mark_held_locks+0x49/0x80
[  302.921788]  __alloc_frozen_pages_noprof+0x185/0x2070
[  302.921822]  ? percpu_counter_add_batch+0x126/0x240
[  302.921858]  ? inode_to_bdi+0x9c/0x140
[  302.921895]  ? vma_wants_writenotify+0x19d/0x350
[  302.921930]  ? __pfx_vma_wants_writenotify+0x10/0x10
[  302.921966]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  302.921998]  ? __pfx_uprobe_mmap+0x10/0x10
[  302.922039]  ? vma_set_page_prot+0xa5/0x120
[  302.922070]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  302.922107]  ? policy_nodemask+0xeb/0x4e0
[  302.922143]  alloc_pages_mpol+0xed/0x340
[  302.922176]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  302.922211]  ? mtree_range_walk+0x74a/0xb90
[  302.922237]  alloc_pages_noprof+0xa1/0x380
[  302.922272]  __pmd_alloc+0x3b/0xad0
[  302.922314]  __handle_mm_fault+0xcf2/0x2f50
[  302.922346]  ? __pfx_mt_find+0x10/0x10
[  302.922371]  ? __pfx___handle_mm_fault+0x10/0x10
[  302.922416]  ? find_vma+0xbf/0x140
[  302.922439]  ? __pfx_find_vma+0x10/0x10
[  302.922468]  handle_mm_fault+0x2d8/0x750
[  302.922505]  __get_user_pages+0x587/0x2fb0
[  302.922571]  ? __pfx___get_user_pages+0x10/0x10
[  302.922607]  ? lock_is_held_type+0x9e/0x120
[  302.922632]  populate_vma_page_range+0x282/0x410
[  302.922668]  ? __pfx_populate_vma_page_range+0x10/0x10
[  302.922702]  ? __pfx_find_vma_intersection+0x10/0x10
[  302.922731]  ? do_mmap+0x6a4/0x11d0
[  302.922760]  __mm_populate+0x100/0x3a0
[  302.922795]  ? __pfx___mm_populate+0x10/0x10
[  302.922831]  ? up_write+0x265/0x4e0
[  302.922868]  __do_sys_remap_file_pages+0x892/0xab0
[  302.922904]  ? __might_fault+0xe0/0x190
[  302.922927]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  302.922955]  ? __might_fault+0x138/0x190
[  302.922977]  ? lock_release+0xc8/0x270
[  302.923005]  ? __might_fault+0xe0/0x190
[  302.923027]  ? find_held_lock+0x2b/0x80
[  302.923046]  ? syscall_trace_enter+0x209/0x230
[  302.923070]  ? lock_release+0xc8/0x270
[  302.923105]  do_syscall_64+0xbf/0x420
[  302.923132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.923155] RIP: 0033:0x7f98da852b19
[  302.923173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  302.923193] RSP: 002b:00007f98d7dc8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  302.923215] RAX: ffffffffffffffda RBX: 00007f98da965f60 RCX: 00007f98da852b19
[  302.923229] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  302.923242] RBP: 00007f98d7dc81d0 R08: 0000000000000000 R09: 0000000000000000
[  302.923255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.923268] R13: 00007ffd7e0ce3af R14: 00007f98d7dc8300 R15: 0000000000022000
[  302.923297]  </TASK>
04:14:22 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), r5)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(r5, r7, 0x0)

04:14:31 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 11)

04:14:31 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r2, &(0x7f0000000380)=@random={'system.', '\x00'})
ftruncate(r1, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

04:14:31 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(0xffffffffffffffff, r7, 0x0)

04:14:31 executing program 7:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmget$private(0x0, 0x1000, 0x400, &(0x7f0000447000/0x1000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mincore(&(0x7f000051a000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/83)

04:14:31 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

04:14:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748dbb91038212e0000710d0f9b7d5e0f1f834c5a9b602a"])
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="663ef1b0ff00f7dfff", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r2, 0x0, 0x0)
mkdirat(r2, &(0x7f0000001040)='./file0\x00', 0xd)
r3 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r4 = fcntl$dupfd(r3, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r3], 0x1)
mkdirat(r4, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_ACTIVATE(r5, 0x4b4e, 0x9)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fork()

04:14:31 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 10)

04:14:31 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d)
ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0)

[  311.960686] loop6: detected capacity change from 0 to 6
[  311.974906] FAULT_INJECTION: forcing a failure.
[  311.974906] name failslab, interval 1, probability 0, space 0, times 0
[  311.978495] CPU: 1 UID: 0 PID: 6142 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  311.978513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  311.978524] Call Trace:
[  311.978529]  <TASK>
[  311.978533]  dump_stack_lvl+0xfa/0x120
[  311.978553]  should_fail_ex+0x4d7/0x5e0
[  311.978577]  ? __pmd_alloc+0x98/0xad0
[  311.978594]  should_failslab+0xc2/0x120
[  311.978608]  kmem_cache_alloc_noprof+0x80/0x760
[  311.978627]  ? mtree_range_walk+0x74a/0xb90
[  311.978650]  ? __pmd_alloc+0x98/0xad0
[  311.978665]  __pmd_alloc+0x98/0xad0
[  311.978683]  __handle_mm_fault+0xcf2/0x2f50
[  311.978700]  ? __pfx_mt_find+0x10/0x10
[  311.978714]  ? __pfx___handle_mm_fault+0x10/0x10
[  311.978738]  ? find_vma+0xbf/0x140
[  311.978751]  ? __pfx_find_vma+0x10/0x10
[  311.978767]  handle_mm_fault+0x2d8/0x750
[  311.978787]  __get_user_pages+0x587/0x2fb0
[  311.978814]  ? __pfx___get_user_pages+0x10/0x10
[  311.978833]  ? lock_is_held_type+0x9e/0x120
[  311.978847]  populate_vma_page_range+0x282/0x410
[  311.978867]  ? __pfx_populate_vma_page_range+0x10/0x10
[  311.978885]  ? __pfx_find_vma_intersection+0x10/0x10
[  311.978900]  ? do_mmap+0x6a4/0x11d0
[  311.978916]  __mm_populate+0x100/0x3a0
[  311.978935]  ? __pfx___mm_populate+0x10/0x10
[  311.978955]  ? up_write+0x265/0x4e0
[  311.978976]  __do_sys_remap_file_pages+0x892/0xab0
[  311.978996]  ? __might_fault+0xe0/0x190
[  311.979009]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  311.979024]  ? __might_fault+0x138/0x190
[  311.979035]  ? lock_release+0xc8/0x270
[  311.979051]  ? __might_fault+0xe0/0x190
[  311.979063]  ? find_held_lock+0x2b/0x80
[  311.979073]  ? syscall_trace_enter+0x209/0x230
[  311.979087]  ? lock_release+0xc8/0x270
[  311.979107]  do_syscall_64+0xbf/0x420
[  311.979122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.979134] RIP: 0033:0x7f98da852b19
[  311.979144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  311.979156] RSP: 002b:00007f98d7dc8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  311.979169] RAX: ffffffffffffffda RBX: 00007f98da965f60 RCX: 00007f98da852b19
[  311.979177] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  311.979184] RBP: 00007f98d7dc81d0 R08: 0000000000000000 R09: 0000000000000000
[  311.979191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  311.979198] R13: 00007ffd7e0ce3af R14: 00007f98d7dc8300 R15: 0000000000022000
[  311.979213]  </TASK>
[  312.051627] perf: interrupt took too long (7815 > 7812), lowering kernel.perf_event_max_sample_rate to 25000
[  312.093381] 
[  312.093769] =====================================
[  312.094665] WARNING: bad unlock balance detected!
[  312.095537] 6.19.0-rc5-next-20260113 #1 Not tainted
[  312.096451] -------------------------------------
[  312.097346] syz-executor.2/6157 is trying to release lock (rcu_read_lock) at:
[  312.098690] [<ffffffff81c20365>] __wait_on_freeing_inode+0x105/0x350
[  312.099902] but there are no more locks to release!
[  312.101088] 
[  312.101088] other info that might help us debug this:
[  312.107456] 4 locks held by syz-executor.2/6157:
[  312.108300]  #0: ffff88800fc343f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  312.109645]  #1: ffff88804a913388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  312.111122]  #2: ffff88800b990950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  312.112433]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  312.113768] 
[  312.113768] stack backtrace:
[  312.114427] CPU: 0 UID: 0 PID: 6157 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  312.114462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  312.114475] Call Trace:
[  312.114485]  <TASK>
[  312.114495]  dump_stack_lvl+0xca/0x120
[  312.114519]  ? __wait_on_freeing_inode+0x105/0x350
[  312.114546]  print_unlock_imbalance_bug+0x118/0x130
[  312.114572]  ? __wait_on_freeing_inode+0x105/0x350
[  312.114599]  lock_release+0x1ee/0x270
[  312.114627]  __wait_on_freeing_inode+0x10a/0x350
[  312.114667]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  312.114696]  ? __pfx_var_wake_function+0x10/0x10
[  312.114728]  ? lock_is_held_type+0x9e/0x120
[  312.114749]  insert_inode_locked+0x25f/0x890
[  312.114781]  __ext4_new_inode+0x223d/0x4cd0
[  312.114813]  ? __pfx___ext4_new_inode+0x10/0x10
[  312.114840]  ? __pfx___dquot_initialize+0x10/0x10
[  312.114873]  ? __pfx_avc_has_perm+0x10/0x10
[  312.114902]  ext4_symlink+0x406/0xb40
[  312.114937]  ? __pfx_ext4_symlink+0x10/0x10
[  312.114967]  ? security_inode_permission+0x72/0xe0
[  312.114990]  vfs_symlink+0x44b/0x840
[  312.115022]  do_symlinkat+0x153/0x440
[  312.115048]  ? __pfx_do_symlinkat+0x10/0x10
[  312.115072]  ? strncpy_from_user+0x21b/0x2f0
[  312.115105]  __x64_sys_symlink+0x79/0xa0
[  312.115131]  do_syscall_64+0xbf/0x420
[  312.115155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.115177] RIP: 0033:0x7f135b166427
[  312.115194] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  312.115214] RSP: 002b:00007ffd2c5df828 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  312.115234] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f135b166427
[  312.115247] RDX: ffffffffffffffbc RSI: 00007f135b1c100e RDI: 00007f135b1c01dd
[  312.115260] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd2c5df2a0
[  312.115273] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  312.115285] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd2c5df8f0
[  312.115304]  </TASK>
[  312.143156] ------------[ cut here ]------------
[  312.143925] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.2/6157
[  312.145550] Modules linked in:
[  312.146081] CPU: 0 UID: 0 PID: 6157 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  312.147604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  312.151427] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  312.154280] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9
[  312.157110] RSP: 0018:ffff88803a12f9a0 EFLAGS: 00010286
[  312.157968] RAX: 00000000ffffffff RBX: ffff8880488d5280 RCX: ffffffff815664c7
[  312.159076] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff8880488d567c
[  312.160177] RBP: ffff8880488d5280 R08: 0000000000000000 R09: fffffbfff0ba6ff4
[  312.161281] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880488d5280
[  312.162466] R13: 0000000000000001 R14: ffffffff85c0cf70 R15: ffff88804a8e7578
[  312.163615] FS:  00005555597bf400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  312.164880] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  312.165827] CR2: 00007ffd2c5decc8 CR3: 000000000d9d8000 CR4: 0000000000350ef0
[  312.166968] Call Trace:
[  312.167519]  <TASK>
[  312.168763]  __wait_on_freeing_inode+0x10f/0x350
[  312.170029]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  312.172138]  ? __pfx_var_wake_function+0x10/0x10
[  312.175736]  ? lock_is_held_type+0x9e/0x120
[  312.178844]  insert_inode_locked+0x25f/0x890
[  312.183546]  __ext4_new_inode+0x223d/0x4cd0
[  312.188656]  ? __pfx___ext4_new_inode+0x10/0x10
[  312.190892]  ? __pfx___dquot_initialize+0x10/0x10
[  312.192281]  ? __pfx_avc_has_perm+0x10/0x10
[  312.195545]  ext4_symlink+0x406/0xb40
[  312.199617]  ? __pfx_ext4_symlink+0x10/0x10
[  312.201470]  ? security_inode_permission+0x72/0xe0
[  312.204425]  vfs_symlink+0x44b/0x840
[  312.206912]  do_symlinkat+0x153/0x440
[  312.208918]  ? __pfx_do_symlinkat+0x10/0x10
[  312.210225]  ? strncpy_from_user+0x21b/0x2f0
[  312.213666]  __x64_sys_symlink+0x79/0xa0
[  312.215002]  do_syscall_64+0xbf/0x420
[  312.216602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.217598] RIP: 0033:0x7f135b166427
[  312.218251] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  312.220944] RSP: 002b:00007ffd2c5df828 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  312.222130] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f135b166427
[  312.223260] RDX: ffffffffffffffbc RSI: 00007f135b1c100e RDI: 00007f135b1c01dd
[  312.224430] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd2c5df2a0
[  312.225527] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  312.226658] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd2c5df8f0
[  312.231427]  </TASK>
[  312.231787] irq event stamp: 1937
[  312.232290] hardirqs last  enabled at (1937): [<ffffffff84ce830b>] irqentry_exit+0x17b/0x650
[  312.233790] hardirqs last disabled at (1935): [<ffffffff813c26fe>] handle_softirqs+0x65e/0x7d0
[  312.235231] softirqs last  enabled at (1936): [<ffffffff813c29a4>] __irq_exit_rcu+0xc4/0x100
[  312.236817] softirqs last disabled at (1765): [<ffffffff813c29a4>] __irq_exit_rcu+0xc4/0x100
[  312.238220] ---[ end trace 0000000000000000 ]---
04:14:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748dbb91038212e0000710d0f9b7d5e0f1f834c5a9b602a"])
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="663ef1b0ff00f7dfff", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r2, 0x0, 0x0)
mkdirat(r2, &(0x7f0000001040)='./file0\x00', 0xd)
r3 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r4 = fcntl$dupfd(r3, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r3], 0x1)
mkdirat(r4, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_ACTIVATE(r5, 0x4b4e, 0x9)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fork()

04:14:31 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 12)

[  312.267902] perf: interrupt took too long (9776 > 9768), lowering kernel.perf_event_max_sample_rate to 20000
[  312.289412] FAULT_INJECTION: forcing a failure.
[  312.289412] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  312.291566] CPU: 0 UID: 0 PID: 6166 Comm: syz-executor.0 Tainted: G        W           6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  312.291613] Tainted: [W]=WARN
[  312.291622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  312.291638] Call Trace:
04:14:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748dbb91038212e0000710d0f9b7d5e0f1f834c5a9b602a"])
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="663ef1b0ff00f7dfff", @ANYRES32, @ANYRES32], 0x88}, 0x20)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
futimesat(r2, 0x0, 0x0)
mkdirat(r2, &(0x7f0000001040)='./file0\x00', 0xd)
r3 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r4 = fcntl$dupfd(r3, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r3], 0x1)
mkdirat(r4, &(0x7f0000001080)='./file0\x00', 0x22)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_ACTIVATE(r5, 0x4b4e, 0x9)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fork()

[  312.291647]  <TASK>
[  312.291657]  dump_stack_lvl+0xfa/0x120
[  312.291694]  should_fail_ex+0x4d7/0x5e0
[  312.291748]  should_fail_alloc_page+0xe0/0x110
[  312.291788]  prepare_alloc_pages+0x1eb/0x550
[  312.291824]  ? __is_insn_slot_addr+0x140/0x290
[  312.291860]  __alloc_frozen_pages_noprof+0x185/0x2070
[  312.291900]  ? unwind_get_return_address+0x59/0xa0
[  312.291932]  ? arch_stack_walk+0x9c/0xf0
[  312.291972]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  312.292015]  ? stack_depot_save_flags+0x2c/0xa10
[  312.292063]  ? do_raw_spin_lock+0x123/0x260
[  312.292109]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  312.292153]  ? policy_nodemask+0xeb/0x4e0
[  312.292196]  alloc_pages_mpol+0xed/0x340
[  312.292236]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  312.292274]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  312.292329]  ? __create_object+0x59/0x80
[  312.292365]  ? do_raw_spin_lock+0x123/0x260
[  312.292410]  alloc_pages_noprof+0xa1/0x380
[  312.292459]  pte_alloc_one+0x1e/0x3f0
[  312.292486]  __do_fault+0x30d/0x480
[  312.292515]  __handle_mm_fault+0x1158/0x2f50
[  312.292554]  ? __pfx_mt_find+0x10/0x10
[  312.292584]  ? __pfx___handle_mm_fault+0x10/0x10
[  312.292632]  ? find_vma+0xbf/0x140
[  312.292661]  ? __pfx_find_vma+0x10/0x10
[  312.292695]  handle_mm_fault+0x2d8/0x750
[  312.292738]  __get_user_pages+0x587/0x2fb0
[  312.292792]  ? __pfx___get_user_pages+0x10/0x10
[  312.292833]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  312.292873]  populate_vma_page_range+0x282/0x410
[  312.292918]  ? __pfx_populate_vma_page_range+0x10/0x10
[  312.292961]  ? __pfx_find_vma_intersection+0x10/0x10
[  312.292996]  ? do_mmap+0x6a4/0x11d0
[  312.293030]  __mm_populate+0x100/0x3a0
[  312.293077]  ? __pfx___mm_populate+0x10/0x10
[  312.293128]  ? up_write+0x265/0x4e0
[  312.293176]  __do_sys_remap_file_pages+0x892/0xab0
[  312.293218]  ? __fget_files+0x20d/0x3b0
[  312.293248]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  312.293286]  ? lock_release+0x1c7/0x270
[  312.293321]  ? __might_fault+0xe0/0x190
[  312.293349]  ? __might_fault+0x151/0x190
[  312.293377]  ? lock_release+0x1c7/0x270
[  312.293419]  do_syscall_64+0xbf/0x420
[  312.293458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.293488] RIP: 0033:0x7f27390b2b19
[  312.293509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  312.293537] RSP: 002b:00007f2736628188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  312.293565] RAX: ffffffffffffffda RBX: 00007f27391c5f60 RCX: 00007f27390b2b19
[  312.293584] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  312.293601] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  312.293619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
04:14:31 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0xfffffffffffffe58)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

04:14:32 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 11)

[  312.293635] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  312.293664]  </TASK>
[  312.360274] perf: interrupt took too long (12237 > 12220), lowering kernel.perf_event_max_sample_rate to 16000
04:14:32 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(0xffffffffffffffff, r7, 0x0)

04:14:39 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_secret(0x0)
r2 = openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x12200, 0xac)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x0, 0xff, 0x78cc})
r3 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))
r4 = openat2(r1, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x214000, 0x0, 0x2}, 0x18)
r5 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x2000, 0x1)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x8, 0xac, 0x6, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x3, 0x200}, 0x2200, 0x3, 0x0, 0x5, 0x0, 0x872, 0x7a7, 0x0, 0x6bf}, r4, 0xd, r5, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10110, r4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/2, 0x2}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000700)=""/231, 0xe7}], 0x3)
write(r3, &(0x7f0000000240)="dd10cad05dd708a614d394de2b8bd0fc4ad749c66d9b687f461d94aaa84bc079d272eb422425070b8cbef8409aef8b2609645c9f66695f066dc35238e12380e38e52eda68163489810110b7ca4cefdbcd24f9dafe51870e4c79ca8d19cc68cf4f5608c4e19adfb25af8b70ab30ea4505eb04167fb9edb21d04f2b3040d6705e451462d5f080f2659161f05616958271873a933f073f6b1639243d2bc9970f905107cf70c9bc8f189ab6d7678a1e899", 0xaf)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x54, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000840)=ANY=[@ANYBLOB="ff030000000800000000000000000000000000000300000000000083cebbd1a54c57894200006f00b910293204f37cdc4360b214025f30ce36d94a7163f7622e527eb7244d9247578ebb83c82518931109c8db04c100000000000000005d6a72954d6392fcc9cb23c6bb8822b6018094e0e8b50a33f6c601ae827b7fe85898342ee987f3467eb348371600"/153])
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0)

04:14:39 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x2c}, 0x0, 0x0, &(0x7f00000002c0)=""/24, 0x0}, 0x58)

04:14:39 executing program 6:
r0 = syz_io_uring_setup(0x70f0, &(0x7f0000000180)={0x0, 0x99a3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0xdfa, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="cbf11debdd06a3f7142b51c973482002c65a3ffe06e2cbfbb25da82775b177f3a45736828a524ea6b9684bbe04cefadb1836a01bfdf6722ac1bccc4a", 0x3c, 0x5}, {&(0x7f0000000440)="09fd5d662de8e2c247c6e9e21a10e9be19478fc75ffbc90ac85303f64f6525160a5535a101b7be0c4b2a92180c6fa95efc0ad9049577b58fe43497d2a78101bf73579241cc9202fb6efa5d8f80c57f15a8cfae700c8cc628021363a15008826e559fa0a4aa05028069ebce84f8ba4e9a17715d6306f6f658e0dc0057847e181bc39c3237fa87aeabbee76c17a63459b84cd024315c9dfe45d656a92cd81866f67e81c9bf587b663d3039fe97f171263c4e1bd14b1ce091a49d2b87a0d598c1fb056a181dc9fc3c5add589a4aff2164a843a01954f431ce046430f8c3a46a3fa34e1cbe76e1c58a2390856e35d11a144169814ee340", 0xf5, 0x5}, {&(0x7f0000000540)="46003fd2e9d45069d5ad7bfdbb4acbe50012ae94e15e86ae9cfc7046f968ff5161cdb55acb7146e5a72648f3e4dbe484e739a34c6d1cb9760098667df0f6cc6bc2f9bd50", 0x44, 0x2}], 0x80004, &(0x7f0000000640)={[{@nodots}], [{@fsname}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]})
fremovexattr(r1, &(0x7f0000000380)=@random={'system.', '\x00'})
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

04:14:39 executing program 3:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x100, 0xeb3, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/37, 0x25}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/147, 0x93}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/249, 0xf9}], 0x8, &(0x7f0000000e80)=""/85, 0x55}, 0x12}, {{&(0x7f0000000f00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/159, 0x9f}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f00000010c0)=""/185, 0xb9}], 0x3, &(0x7f00000011c0)=""/155, 0x9b}, 0xfd}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/132, 0x84}], 0x1, &(0x7f0000001400)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002400)=""/199, 0xc7}, {&(0x7f0000002500)=""/253, 0xfd}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/2, 0x2}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/240, 0xf0}, {&(0x7f0000002ac0)=""/61, 0x3d}], 0xa, &(0x7f0000002bc0)=""/251, 0xfb}, 0xc0}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/109, 0x6d}], 0x7, &(0x7f0000003280)=""/103, 0x67}, 0xe7f6}], 0x6, 0x20, &(0x7f0000003480))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000014)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003880))
close_range(0xffffffffffffffff, r7, 0x0)

04:14:39 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 13)

04:14:39 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

04:14:39 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x206883, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x1, 0x3})

04:14:39 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 12)

[  320.146745] FAULT_INJECTION: forcing a failure.
[  320.146745] name failslab, interval 1, probability 0, space 0, times 0
[  320.151327] CPU: 1 UID: 0 PID: 6197 Comm: syz-executor.0 Tainted: G        W           6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  320.151347] Tainted: [W]=WARN
[  320.151351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  320.151359] Call Trace:
[  320.151364]  <TASK>
[  320.151368]  dump_stack_lvl+0xfa/0x120
[  320.151389]  should_fail_ex+0x4d7/0x5e0
[  320.151413]  ? ptlock_alloc+0x21/0x70
[  320.151433]  should_failslab+0xc2/0x120
[  320.151447]  kmem_cache_alloc_noprof+0x80/0x760
[  320.151468]  ? __create_object+0x59/0x80
[  320.151484]  ? do_raw_spin_lock+0x123/0x260
[  320.151503]  ? ptlock_alloc+0x21/0x70
[  320.151519]  ptlock_alloc+0x21/0x70
[  320.151535]  pte_alloc_one+0x86/0x3f0
[  320.151547]  __do_fault+0x30d/0x480
[  320.151559]  __handle_mm_fault+0x1158/0x2f50
[  320.151575]  ? __pfx_mt_find+0x10/0x10
[  320.151588]  ? __pfx___handle_mm_fault+0x10/0x10
[  320.151607]  ? find_vma+0xbf/0x140
[  320.151619]  ? __pfx_find_vma+0x10/0x10
[  320.151632]  handle_mm_fault+0x2d8/0x750
[  320.151648]  __get_user_pages+0x587/0x2fb0
[  320.151669]  ? __pfx___get_user_pages+0x10/0x10
[  320.151685]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  320.151701]  populate_vma_page_range+0x282/0x410
[  320.151718]  ? __pfx_populate_vma_page_range+0x10/0x10
[  320.151735]  ? __pfx_find_vma_intersection+0x10/0x10
[  320.151749]  ? do_mmap+0x6a4/0x11d0
[  320.151763]  __mm_populate+0x100/0x3a0
[  320.151779]  ? __pfx___mm_populate+0x10/0x10
[  320.151796]  ? up_write+0x265/0x4e0
[  320.151814]  __do_sys_remap_file_pages+0x892/0xab0
[  320.151830]  ? __fget_files+0x20d/0x3b0
[  320.151844]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  320.151859]  ? lock_release+0x1c7/0x270
[  320.151873]  ? __might_fault+0xe0/0x190
[  320.151884]  ? __might_fault+0x151/0x190
[  320.151895]  ? lock_release+0x1c7/0x270
[  320.151911]  do_syscall_64+0xbf/0x420
[  320.151925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.151938] RIP: 0033:0x7f27390b2b19
[  320.151947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  320.151960] RSP: 002b:00007f2736628188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  320.151972] RAX: ffffffffffffffda RBX: 00007f27391c5f60 RCX: 00007f27390b2b19
[  320.151980] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  320.151987] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  320.151994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  320.152001] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  320.152013]  </TASK>
[  320.178769] FAULT_INJECTION: forcing a failure.
[  320.178769] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  320.180930] CPU: 0 UID: 0 PID: 6199 Comm: syz-executor.4 Tainted: G        W           6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  320.180972] Tainted: [W]=WARN
04:14:39 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 14)

[  320.180981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
04:14:39 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

[  320.180996] Call Trace:
[  320.181005]  <TASK>
[  320.181015]  dump_stack_lvl+0xfa/0x120
[  320.181051]  should_fail_ex+0x4d7/0x5e0
[  320.181101]  should_fail_alloc_page+0xe0/0x110
[  320.181133]  prepare_alloc_pages+0x1eb/0x550
[  320.181163]  ? __is_insn_slot_addr+0x140/0x290
[  320.181195]  __alloc_frozen_pages_noprof+0x185/0x2070
[  320.181233]  ? unwind_get_return_address+0x59/0xa0
[  320.181262]  ? arch_stack_walk+0x9c/0xf0
[  320.181311]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  320.181351]  ? stack_depot_save_flags+0x2c/0xa10
[  320.181393]  ? do_raw_spin_lock+0x123/0x260
[  320.181433]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  320.181474]  ? policy_nodemask+0xeb/0x4e0
[  320.181513]  alloc_pages_mpol+0xed/0x340
[  320.181550]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  320.181586]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  320.181650]  ? __create_object+0x59/0x80
[  320.181704]  ? do_raw_spin_lock+0x123/0x260
[  320.181767]  alloc_pages_noprof+0xa1/0x380
[  320.181828]  pte_alloc_one+0x1e/0x3f0
[  320.181866]  __do_fault+0x30d/0x480
[  320.181905]  __handle_mm_fault+0x1158/0x2f50
[  320.181946]  ? __pfx_mt_find+0x10/0x10
[  320.181974]  ? __pfx___handle_mm_fault+0x10/0x10
[  320.182017]  ? find_vma+0xbf/0x140
[  320.182045]  ? __pfx_find_vma+0x10/0x10
[  320.182076]  handle_mm_fault+0x2d8/0x750
[  320.182114]  __get_user_pages+0x587/0x2fb0
[  320.182161]  ? __pfx___get_user_pages+0x10/0x10
[  320.182198]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  320.182234]  populate_vma_page_range+0x282/0x410
[  320.182275]  ? __pfx_populate_vma_page_range+0x10/0x10
[  320.182315]  ? __pfx_find_vma_intersection+0x10/0x10
[  320.182347]  ? do_mmap+0x6a4/0x11d0
[  320.182378]  __mm_populate+0x100/0x3a0
[  320.182418]  ? __pfx___mm_populate+0x10/0x10
[  320.182458]  ? up_write+0x265/0x4e0
[  320.182498]  __do_sys_remap_file_pages+0x892/0xab0
[  320.182536]  ? __fget_files+0x20d/0x3b0
[  320.182564]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  320.182598]  ? lock_release+0x1c7/0x270
[  320.182631]  ? __might_fault+0xe0/0x190
[  320.182656]  ? __might_fault+0x151/0x190
[  320.182682]  ? lock_release+0x1c7/0x270
[  320.182718]  do_syscall_64+0xbf/0x420
[  320.182763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.182790] RIP: 0033:0x7f98da852b19
[  320.182810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  320.182836] RSP: 002b:00007f98d7dc8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  320.182862] RAX: ffffffffffffffda RBX: 00007f98da965f60 RCX: 00007f98da852b19
[  320.182879] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  320.182895] RBP: 00007f98d7dc81d0 R08: 0000000000000000 R09: 0000000000000000
[  320.182911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  320.182927] R13: 00007ffd7e0ce3af R14: 00007f98d7dc8300 R15: 0000000000022000
[  320.182952]  </TASK>
04:14:39 executing program 0:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 15)

[  320.291741] loop6: detected capacity change from 0 to 6
04:14:39 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) (fail_nth: 13)

04:14:39 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0)
recvmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000140)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40000102)
sendfile(r0, r3, 0x0, 0x7fffffff)
write$binfmt_elf64(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40}}, 0x40)
close(r2)
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r5, 0x0)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f00000005c0)={'binder0\x00'})
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)
close(r4)

04:14:40 executing program 2:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x48)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff)

[  320.345746] FAULT_INJECTION: forcing a failure.
[  320.345746] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  320.347460] CPU: 0 UID: 0 PID: 6219 Comm: syz-executor.0 Tainted: G        W           6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  320.347494] Tainted: [W]=WARN
[  320.347502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  320.347514] Call Trace:
[  320.347521]  <TASK>
[  320.347529]  dump_stack_lvl+0xfa/0x120
[  320.347560]  should_fail_ex+0x4d7/0x5e0
[  320.347601]  _copy_to_user+0x32/0xd0
[  320.347638]  simple_read_from_buffer+0xe0/0x180
[  320.347676]  proc_fail_nth_read+0x18a/0x240
[  320.347705]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  320.347733]  ? security_file_permission+0x22/0x90
[  320.347758]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  320.347785]  vfs_read+0x1eb/0xc70
[  320.347805]  ? __pfx___mutex_lock+0x10/0x10
[  320.347828]  ? __pfx_vfs_read+0x10/0x10
[  320.347847]  ? lock_release+0x1c7/0x270
[  320.347878]  ? __fget_files+0x20d/0x3b0
[  320.347905]  ksys_read+0x121/0x240
[  320.347924]  ? __pfx_ksys_read+0x10/0x10
[  320.347947]  do_syscall_64+0xbf/0x420
[  320.347972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.347995] RIP: 0033:0x7f273906569c
[  320.348012] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  320.348033] RSP: 002b:00007f2736628170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  320.348054] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f273906569c
[  320.348068] RDX: 000000000000000f RSI: 00007f27366281e0 RDI: 0000000000000003
[  320.348082] RBP: 00007f27366281d0 R08: 0000000000000000 R09: 0000000000000000
[  320.348095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  320.348107] R13: 00007ffdfa22d25f R14: 00007f2736628300 R15: 0000000000022000
[  320.348128]  </TASK>
[  320.348595] process 'syz-executor.7' launched './file1' with NULL argv: empty string added
[  320.363854] FAULT_INJECTION: forcing a failure.
[  320.363854] name failslab, interval 1, probability 0, space 0, times 0
[  320.379350] CPU: 0 UID: 0 PID: 6226 Comm: syz-executor.4 Tainted: G        W           6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  320.379390] Tainted: [W]=WARN
[  320.379400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  320.379415] Call Trace:
[  320.379423]  <TASK>
[  320.379432]  dump_stack_lvl+0xfa/0x120
[  320.379466]  should_fail_ex+0x4d7/0x5e0
[  320.379516]  ? ptlock_alloc+0x21/0x70
[  320.379561]  should_failslab+0xc2/0x120
[  320.379593]  kmem_cache_alloc_noprof+0x80/0x760
[  320.379642]  ? __create_object+0x59/0x80
[  320.379682]  ? do_raw_spin_lock+0x123/0x260
[  320.379734]  ? ptlock_alloc+0x21/0x70
[  320.379778]  ptlock_alloc+0x21/0x70
[  320.379822]  pte_alloc_one+0x86/0x3f0
[  320.379853]  __do_fault+0x30d/0x480
[  320.379897]  __handle_mm_fault+0x1158/0x2f50
[  320.379945]  ? __pfx_mt_find+0x10/0x10
[  320.379980]  ? __pfx___handle_mm_fault+0x10/0x10
[  320.380038]  ? find_vma+0xbf/0x140
[  320.380073]  ? __pfx_find_vma+0x10/0x10
[  320.380113]  handle_mm_fault+0x2d8/0x750
[  320.380162]  __get_user_pages+0x587/0x2fb0
[  320.380224]  ? __pfx___get_user_pages+0x10/0x10
[  320.380273]  ? mm_get_unmapped_area_vmflags+0xda/0x140
[  320.380322]  populate_vma_page_range+0x282/0x410
[  320.380374]  ? __pfx_populate_vma_page_range+0x10/0x10
[  320.380426]  ? __pfx_find_vma_intersection+0x10/0x10
[  320.380469]  ? do_mmap+0x6a4/0x11d0
04:14:40 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x101440, 0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x1, 0x20, 0x8, 0x0, 0x8c96, 0x10, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7297, 0x2, @perf_bp={&(0x7f0000000040), 0x7}, 0x40, 0xff, 0x1, 0x0, 0x7ab4f735, 0x4, 0x6a, 0x0, 0x10001, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r1, 0x3)
ioctl$TCSETAW(r0, 0x4b3a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "e4e79ceb733d1c16"})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7ff, 0x0, 0xc000, 0x22}})

[  320.380509]  __mm_populate+0x100/0x3a0
[  320.380561]  ? __pfx___mm_populate+0x10/0x10
[  320.380614]  ? up_write+0x265/0x4e0
[  320.380665]  __do_sys_remap_file_pages+0x892/0xab0
[  320.380715]  ? __fget_files+0x20d/0x3b0
[  320.380748]  ? __pfx___do_sys_remap_file_pages+0x10/0x10
[  320.380792]  ? lock_release+0x1c7/0x270
[  320.380828]  ? __might_fault+0xe0/0x190
[  320.380857]  ? __might_fault+0x151/0x190
[  320.380890]  ? lock_release+0x1c7/0x270
[  320.380937]  do_syscall_64+0xbf/0x420
[  320.380974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.381006] RIP: 0033:0x7f98da852b19
[  320.381028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  320.381058] RSP: 002b:00007f98d7dc8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  320.381090] RAX: ffffffffffffffda RBX: 00007f98da965f60 RCX: 00007f98da852b19
[  320.381112] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
[  320.381131] RBP: 00007f98d7dc81d0 R08: 0000000000000000 R09: 0000000000000000
[  320.381151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  320.381170] R13: 00007ffd7e0ce3af R14: 00007f98d7dc8300 R15: 0000000000022000
[  320.381200]  </TASK>

VM DIAGNOSIS:
04:14:31  Registers:
info registers vcpu 0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88803a12f4a8
R8 =0000000000000000 R9 =ffffed1001724046 R10=0000000000000020 R11=6e6920726568746f
R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30
RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555597bf400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 ffffc90000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd2c5decc8 CR3=000000000d9d8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801a64fb50
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff110034c9f6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a64fb88
RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555593b9d400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007effd401f368 CR3=000000000e3d1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000