ngth: 249 > 4
[  301.956360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.977167] Bluetooth: hci0: command tx timeout
[  306.024926] Bluetooth: hci0: command tx timeout
[  308.071664] Bluetooth: hci0: command tx timeout
[  310.119219] Bluetooth: hci0: command tx timeout
[  318.065417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.066651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.150379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.151984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.507875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.516712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.559414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:02 executing program 4:
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x404714)
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)=0x8001)
mount$cgroup(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x24a004, 0x0)

07:06:02 executing program 6:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x80, 0x0, 0x1, 0x8, 0x0, 0x4, 0x42, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4800, 0x6, 0x2, 0x7, 0x9, 0x400, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r1, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x5, 0x6, 0x1f, 0xb2, 0x0, 0x4, 0xc11ca, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb868, 0x2, @perf_config_ext={0x1762, 0x6}, 0x50127, 0xcb7, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
pwritev2(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x1008, 0x0, 0x11)
readahead(r0, 0x7ff, 0x0)
mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='.\x00', 0xfffffffffffffffc, 0x48, 0x0)

07:06:02 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

07:06:02 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:02 executing program 5:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040", 0x1f, 0x4e0}, {&(0x7f00000005c0)="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", 0x101, 0x540}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d5f4655fd6f4655fd6f4655f000000000000040080", 0x1d, 0x4100}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00587f405c26e4260000000000000081e1b9eab77d3fbd822822965ce7fe04cd44ba2b01850510cb19b9012227c3f318ab3dd17ba22e9474d393a86a2af19502f82f2b05bca570fcf97afd7fbc008cba1d900e67ffffa409a9d08e6cffa026ae7afef7a3ea3a8a99462eec10e9acfcfb7ac8981e770b07c8e792f5c5e08a1d51988aab096a764844eb4c20ef"])
getdents64(r0, &(0x7f0000000140)=""/130, 0x82)

07:06:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:02 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

[  328.031059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.040696] loop5: detected capacity change from 0 to 4096
[  328.054406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.069958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.070621] EXT4-fs (loop5): failed to parse options in superblock: x�T�ʝ�4�7��qH�ks�
[  328.070621] ��������
[  328.085217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.107886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.109447] EXT4-fs error (device loop5): ext4_quota_enable:7119: comm syz-executor.5: Bad quota inum: 14, type: 0
07:06:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

[  328.128210] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=0, err=-117, ino=14). Please run e2fsck to fix.
[  328.147800] EXT4-fs (loop5): mount failed
[  328.173447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.192775] 9pnet: Could not find request transport: f�
07:06:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

[  328.222859] 9pnet: Could not find request transport: f�
07:06:03 executing program 6:
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000080)={0x6, 0x8, 0xe, 0x2, @msf={0x6, 0x1, 0x1}, 0x6})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73668553b300080820000400008000f8", 0x16, 0x5}, {0x0, 0x0, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0xffffffffffffffff}], 0x10002, &(0x7f00000000c0)={[{@shortname_winnt}, {@shortname_lower}]})
truncate(&(0x7f0000000040)='./file0\x00', 0x800)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(r0, &(0x7f00000001c0)='./file0\x00', 0x84041, 0x30)

07:06:03 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  328.267586] loop6: detected capacity change from 0 to 16383
[  328.275274] FAT-fs (loop6): bogus number of FAT structure
[  328.275741] FAT-fs (loop6): Can't find a valid FAT filesystem
07:06:03 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  328.304194] loop6: detected capacity change from 0 to 16383
07:06:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

[  328.310739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:03 executing program 5:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040", 0x1f, 0x4e0}, {&(0x7f00000005c0)="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", 0x101, 0x540}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d5f4655fd6f4655fd6f4655f000000000000040080", 0x1d, 0x4100}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00587f405c26e4260000000000000081e1b9eab77d3fbd822822965ce7fe04cd44ba2b01850510cb19b9012227c3f318ab3dd17ba22e9474d393a86a2af19502f82f2b05bca570fcf97afd7fbc008cba1d900e67ffffa409a9d08e6cffa026ae7afef7a3ea3a8a99462eec10e9acfcfb7ac8981e770b07c8e792f5c5e08a1d51988aab096a764844eb4c20ef"])
getdents64(r0, &(0x7f0000000140)=""/130, 0x82)

[  328.363947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.374330] 9pnet: Could not find request transport: f�
07:06:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

07:06:03 executing program 6:
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2)

07:06:03 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  328.428633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.454793] loop5: detected capacity change from 0 to 4096
[  328.469717] EXT4-fs (loop5): failed to parse options in superblock: x�T�ʝ�4�7��qH�ks�
[  328.469717] ��������
07:06:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0)

[  328.488019] EXT4-fs error (device loop5): ext4_quota_enable:7119: comm syz-executor.5: Bad quota inum: 14, type: 0
07:06:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

[  328.500370] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=0, err=-117, ino=14). Please run e2fsck to fix.
[  328.512644] EXT4-fs (loop5): mount failed
07:06:03 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/222, 0xde}, {&(0x7f0000001300)=""/74, 0x4a}, {&(0x7f0000001380)=""/110, 0x6e}, {&(0x7f0000001400)=""/223, 0xdf}], 0x7, &(0x7f0000001580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x40000040)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000001640), &(0x7f0000001680)=0x4)

07:06:03 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @xdp={0x2c, 0x0, <r2=>0x0}, @tipc=@name, 0xff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = accept4(r1, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80, 0x180800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000001ac0)={{'\x00', 0x3}, {0x4}, 0x40, 0x0, 0x0, &(0x7f0000001700)='\x00', &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)="df8984040a9b92bfc03dc23484506b0750921acc66371de15487a32ab30ccd460e90ced8d9e8510e2ebbfd0e36bd4b0387a183c4a152ac47c4c5c5f2ec5596f680b7e446467d981c9fcb52951feb3ef6df16666c8cddfce7a62b68cb18ae5219173ba686875aaa7e556b6a704be9d9827369731babb46f506edd3b3cab8089919c0feef09e226cd4d8b8fdf6b7a1fdd3e3d4a67ac40bb6845c52f0ee281ce3cd672d5ee48e07c3c31acd91305a71dcc32429c5deadecc0f66ec6efb5fac6dba291bdd6769d51d9608cd4bb8606cc309f3e6d99a20bf74589b887b6cc8298fb46263ccfa3cc7fb197e12e06ebcce15cba38875fcd5f1b5ed2b692efff2c62accc4e575baa75e458ba077bb34f72f7f085e357eeadaaa34fedcbabb018edea42fcdbc774397b1f396b8e19414a62ba47f303c8aad6c103752e443307c46acf3fa370e8ea40b539f7cf60971237bbbaa7", 0x14f, 0x0, &(0x7f0000001900)={0x2, 0xe4, {0x1, 0xc, 0xa8, "3969eceb6c59114e3f0213d443e492a18a081c3525a965aa5b6f4be1e6bf9492daa18087f44dbc7d4ec6dd68c63530dfdebb9b65cc074d1ad155a0f9854701ff99dc63f3fae8b9d5a6ed78ddd9932e55c281484236442f7e6f45ceeedd965da195d7199f2fc2c2fdb721ccd9714961b40412962ecde0bbf455d6a7d665e3a7fa93e14bd3d22394aaae33650e0198cee9ec2653987c03fa8c1ce46bf2ca9a1a9940acf61f2ee22073", 0x2f, "520f90f242946f94bdecb5031ebd973239e1c3e1c4f886c1651a57c5264081847b005f74656ab1aca9fae780052c24"}, 0xa9, "4eededcca1a67fac1da9328dd6f5339afb97f80073f1c90d1b19aa6e5d3a6b7729131adb9fbd9e99d11ee1084087874c52d11e041468f9a6af20f0aa7c5590952da1aa1caf82df90c05fd8b633f16a001ab9bfa8e6a0095c7d962a0a0881d667602c6887dc27a3816158b85de410510c8440cbc49a1b38a8b58819d4f8cc8603df4a66712b3d68adb10d4ef281978781757564f00720eb4283107aac9b7f2a8a40f51cfed10472f0d1"}, 0x199})
bind(r5, &(0x7f0000001b40)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0x80)
sendmsg$inet(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)="0dc1c35c888977a3054e2a1e1b367a09eac8", 0x12}, {&(0x7f0000000200)="29aa6f39b4f8629779bba7ee7ccb2cfe11df7686f19f9c819b6386e5f49f71210adfd4e4", 0x24}, {&(0x7f0000000240)="721e3ed7fc9e368842c53fb8e7ea842dadb3d421cbd045bc266bca8e68c36d7982f210e86ef7f220c89ce5fc2981cef75e12e424599e3f37b945b18d0b8ec3672cc7642466f75df5443a01e312c62c49f32500504e5df549465dd45c52f676ddde02b17b22bbd1130539409fe8eb3d414edcdd992faeca899c66652e863f839d83a7b9dd83a7bf88c4a57cdcf345fb4dd38615b3d6b0afc02b5a36a676f67461f477521c8d1dabdf62a724f406640c70c3e784bcf4c2111eb84b39d2aec0aec7ea72", 0xc2}, {&(0x7f0000000480)="f08f2607e0dbef4c605ef783a5616a1c2f21215b3368128d6005d2b9374d9f06c22849005eee4560837dcc33681197a9f7a0924eaccd955ad97af29b378be70022c5f06afae7329883f36fe32c60e11dab70df7997556ca9aaa36aeac647b6239bc9200882f51b6b6e17c7edf7168370bffab5828211c70db8ab02291314a743f70443feea0870b3ec782f900ef857f098af93dcf78bcb61610e5fdf7d13255bce12f3ab8eb86e09cd89022b50db0ee7f40232070baee82c54bfc89518b60441ab0234418373ee42b1772d027a39633ccd2e86881cb839350d82430a1285ef4668dfd1e5e077299f810dced2e8aabda683019dada2f65977983fea29fbcc364a944bbd998691df947db72452631e2d5a8dcb6e5fd14b51a78c17f361f32cd300f4f09f307f46880d148faaffa5b9b4ca7277b0f7fa62c9ade51519f58fd1d5b9e5e77ddedf5f04a4fb0ec0bad5076e655e588caff93b5d449167b88e953e6ea2e007f868f03a5abad3c8bea165d0317f399dee4ab3f12fcf63d0ae40a89f04ff3cecf9c761f897b9ad542c9d8c9afa9be269264ddebeec85adaeea4ecee6f5f62620f2591baf72b6e68ebb13b49fdef5a08a385f751d203277470cf53c384906d915cacfed08d76afa4b1edb7a3c0fa380e3bc7af2117e7d0519a3f4679e9f5b9ac273c189ffcb00625776680b63d44c3bb1252eba3dca1f155eecd08464cc79779707d6ee41de45b5d98dc60795fbe5141de723feb4171e171b3bcb0c40a2d419159013dcae3f96a2d9ea7a76a60284b0b41bf96626bd7f8275832151c146d17651da581cef682dba55d901794bc598ca039fc918b10ec553c3f932ea81a15ff5855f6d8ae887bea388eb5defff5b9ec401632cd103c7bac0a682f5ee04d6f4a8829e4c38f852b24c2f0417514048fc9fce3ba594f75370349ff06429749b1c61d3d42135115770781d9216aeb003a066069a89ae87591d595079815a6ac27abfc193ba5590888e493e34040bbfa909008f974de0b5159015fd7432ef218007a7c4e2a68262c56af535a9b1ecbf8f380a2d9f6a4c55612c0ec237f37b30bea35f2f5db4e6284797a9188a3cab924bc17baa9f1384d76d33057e6fa57d0cd6a7e7495e6b96edf6c896441eb5046f7c7003a09daccc15e34d19e5e3fd0065ec6b63819afc7190c53f8d50486ccc0f67cad313ff7c4e7566006ca47fd5cdb09659e4879d255af7458b7d78155c5117dc2e2a63e430b8dc8f13d597e9de8ac3ff4f8e6431e3725a11dc4a6aa527aea3cf486b597a98ae01a637c8662494e827fa2de31dad1a04999c4e7ff55ac66c97d9f974ed83cd5c9356e8d831ab27551d53e3a85f6e8ac308422ce517f2de518ceafc18ae0b46ac845feb5ff87edda310bee5f5f956f945776fc2e5419b01cce9bd6371ce11c0656fe87219e0837897e1b5b659fc87ba1abf0b47bbcad5eb935a265f2d978fd2d1075abedeb50ec674f59924d646798c1b5c41687e2359e9e28daf578aa3c3507c146bfce239398554a4ca1632776126ac971645a48f4eee60d4b2281c89af54393bb0db9d7921ccd09988de61dbe9edbd2cba1cdaf96a876bc895ab77cbab9cda71165ca7b843219df4ecf643ba77c1def77332ecc01160858c47b003aa5d980930d99352cd8cf7e8f575459946b19688162f618da2679edfaebfc43183e6c6cb135ef011782745480df7ce7fd45a0eb6e451f971c48f9b26b1bb17e50b8c408e8bc302d3680de1e22880927fb6fa443fff37ac1b6310d01eec0d5eb4309feaf099e8a362d6a5c47567061e3645ef46d1bce06190abf732289a811cbcf385354273dc6498344c305655d4e620c152e4625995a4fd13b91a861dfe99b46e935a4231ec5665f356490b6294571b6c4a46b2417f60328beb2645e4dcd544d1e2ae7b0dc42508db83c91e1e7711577a3d967c80d259f328b5cd5f1b5a038800ee6ec52b60bf9a4a9fe893426f7df4d537428ad03aada1c56d47911964f096e06743d7c2448c17d0bd12c672f7ab319ea6ce29ce6f66e49a3958064fc0495899c2ff0cef179b050c78344f7608a34ccfa940be109edc6827d5795d243b2132640413ea46f727905ba2195f26004a7b16eeff9aa0670e6c788fbc84b270ecebf94fa946e63600123ff7f9f7181af07b624aa3838ce76899bd9c125b4f617b0cba134bd927a5b8923bd24c507b7e297c2b7e493e84a0c27c8a129ebd4152ed942c08fe69c245f59d7cf05d2b4403f3930a67d9d2b2f4d19800f42233c9c506252d2dafb59bb49841b6048308fb9a35d1cb8cfd6d87557fefddc71623447da5a8e74c0f9dd73fb00f02ef2ac2f8403149028d0acb0693dee3f4348175429afa20b825b356f5cd1de7db4ac2ec5c309767f80713dbed08e91b65be1ee6789a1435e1f2df09daa90ddf05670af18e2e222442877f2cc70bf2957093e3fde5217f6ff86c83b2d56d4594ab49726d491a7fdcaa25e30b5d78e4e8a2bb28a6a7d604f4d9aff72f7333badbf87077b2faf70a329c90d7c07547c3a279ded7a8b7dd4b74612815b7e27cf9e0c002e41f521ee04f67c8c92f2b21167d21d7f9fe0c936335086b0cd40286732a8a6bf5c63dd3d2a38e7048fda16e6059ae4c0e4938a3b72432f55872ba5657a73ec56a8939e8fc4c1474fe6b96fc444338e82c1d891857285701ce7149eceeb33b0e1e6cf82a9e67fbccaf69327c3dc3c91c7548c092f4a0dd5cd03cb75df9d23a3d40e40a99b5676bfed8f5d656ffa8d20190a6c83175684aa683219f1310c59f2fdd3d5e8af28e73776f60dc349d3595d2c7264c92b72313b14cab8c86a53c355827266d621654a63af654ec820e0b02f3da8bd13ab16043edfca650e990b4a5b4819a9d5208a29aa8d9c69eda1754155076c7724350a3f59c9cc6d7114cd01aae2d4eb05a2a1b1da2e62655bee520b53a5f095b745044547bb2102753b2721f3b3620fe560f7a240806ac3c10f2ecb946f0a7362abfcbf238b72e34a180a050a7442763291e1a6ed679e45923ef14445020b9eab4f5b65f604d25114f8e80168539a89cb39582a6a13f53110c6879c6d9cb5fbee6bfca6ffa3571ae2819b9b42647ba4cb426ff08b62e833189f5fac65c7109aa11bfe3941ab473a96e97b5ad55098b41fd0341f547140a761e02ee8db55322bb0433d9db821447a08d439f25c094c0677ddcb9b11e7c533f6b6a9971b7ce69c06783cf7a5a91ec210969e956c4e037bc68a1a96757c8eaae3905f673c49bfa35b288e9957ab2b36fabba1dbc204105f59468932a75c963d1caa7bd64feac137030ca2287a054bb939b53916927a7a923db51fa6a388610880c3b542d48e1ddf6034be9291b377ae0f6eceb5c31f9eb9f415d5c5bcaf82c76f843fa7e284ffb04af9d8042848e5b615204b017296f73d7cb045d7f298f794628ccb0570f83453cffe99eeeb37642d98536f3e5bba0093291894d3bb8f7d7e00e81c806c370805e03d859f46028e9d9883134bf30e6aaf2a65dd35793864a6feeb1cf9ed97393a498265b42c4b85ef665d23efcab214c4d5a6c2ea68aeb47c3dd500dbc9b0855535b1eb916815a34b0383da4d7b19bd90376cfeecd534f674320b23bebe66ba86832d1eb50ea7868fdbfffa4255101fa842841fb6004db8ee70de14fef83468e97adb87c45772055ea7707dc168b2419758785715c7ef4413ea2a6558544b379e3d53b95e866ded6fa18c0e109afe27f30ffa6e69103e2d654f84b013cd3f96b2eefe552f8f890d03ec3c85ea9ac7700562ecabb2329aae31a4773baea7632cbe8280f58d83239b7cdf99aebeb8e2f819c4b790da6f460b352cc71f03ad563d734f25c7c86f2e72c7861afd26f4aead3a97d1d47306d45810cc89d7684e0ead05fe75dbd33a5b99799fe6ec754d7820f47391bcdfd8217ca6a5fde9818c70ae0320c25dc28dbfc9a6fdd9705330456540a795a266f44048cbea633040148bb45eac259630882c6f9d5dbd55f91f472aca66c73c63365f5ef86ffad8c5a7873bdffb7011c7d744b7b1b2bad07108443ad0c7466699bc2ca5fc155117893e4f5e481f956ffcced6b164ba78cfc1a657b70e2857ea3ecb1508d10000e34a5a5a91831b8e83b6043b651810e1607227ed9ef00978310c8c15b629ae5802d5c56bfe7302050525c77e53e7f6dd8dde1922056a639237a905e42c2c3084dc734cd6c2685e734a329dd6f41a93fb8ce2233c00218914eb8467e1f5d24bc5c2efabf45ef8346fd60ccbec9a7d41079b49ff453c29c6444dce7c31f00bf65aec6d7d81dbe0f30d70a8173c4f14fa052c354b8d13d71bb5a609420b2dca9f0a59dc8a384b458e3d34f86972ede14f0daf335e7f3adec4796b0f78ecc36e787ab733905871645cdc8b58bebc3eb54593eaa377cc5c0176be5a7a769bb0f596c3869a219da97092a2d7cebf6f77a98fefae8292fbdf85a50e724521b54ae36fee377e3850ee4a2b371cf8e65194e4c0fa43485a79f2d4073b3493f3cd19e5e635e068b680c709cb814c887e81745daa2c196b8816f356eb692add051b923e126c35d21950b032be2ce0ce06f353cda84e95777164c9c252bcdc6a60bb3c33af541f4a21b9feff2fde447b0d74e5d20ed1a05db72c09c1e4e02218977a2e3ee47ca632bd1c03ceaacbc1d0e207becf959519a550659b90a883e7dffe22717bdc1918d99b78f052fce38e0537b4c2b3d58c215e8b3772e31762a04bccb193ba7b2665fd31fb853954904ca56b0266634564f004bbb15cf4f619ac537a2b62e4b32f25672425cf7cc3c470e83a3032becf0716c6ef86de41164509cc1f082b521cb02fb31e474a8bbb4b4f0a61915298a0c5e756c5532b451157aa4348354a04efa9cffadf8659fe5428f31be8bb8ecc90c6a6f8acf1618e50322af8a5147d89beb1a557bad65f12ec5b55e9a3c6704ca6d23ddc39d06ed89aa85babd31fc463de9b88ffc202e7e550e672e095c5d35d250fd63727b0b9f87750dac090c3ae942a11a775c9b59f0bd6fa15e986fb62251c624acf54b2866750e264d7c51e33ef446218567c12ddfa13f2b675a6e23d056758fb3c059baa8967e877f5e72d971e79986bdd42ea2fb752fd7f7c28672ed4c2066065427e154b7da26eb8e75b0e5cce31d26d8687a24ff276b1c39fc9305cf9ef6460f437fceb3279ddb2e367fac1b928e390ff3acc6c7e4b3d734f0ce97a6fcbe37e2249260ef5164ab7f734ffdb0357f977af46c788119cb0590f86fa9fa8ca4d37b72b97c0acaea369b799a115802750c8865661f42127f0da581cce0d795d4438439a6c04216e9087aefea9d03aee50663d182a9a1fa791320d7804956e11d3e379c4e6ff10957a76adafbbc98315688cc7eeca7589c3e95952052148b0437d3f8ccd0c8a74f1c72af5292974914244642014f5349431a06bcb18ebdc3de9e989cb45e520b6e05d1730e315ec6976a32cf5f49aca57bc63856add0f95e029f622f94cac0497750616e656a6135178492d81463cc0074f7350c0961a93f1e7d722d322284ad3da46afe601351c7602b8ffe9f48af9deb07f0577b62bd05dea776ec8721dd3df2e870a24d2b75490c5b92579b7827aaf41cba5ca5d98453ff35cb5390c3bbd91cdf03a84626badcece31715d86986b951d86dda9ea58702ca6ee405f64a778393af41fd2837eeacd9900628f8e16274f60690218f1974a96123525c9685d3bf1c9fae967477ce43f2e1ca369c3c33b1813a163322c7c4c802a0e157e297d1aa7a4b", 0x1000}, {&(0x7f0000000340)="f9ed00a659b3815ebdff8d5cadb7ae16575d046cf2e7e349efd9fdcefed738b8f7cba77b6e9bb9cb33b361729c0e2ed04304aec3fbdcaddaffd122b328cf449097139a7979fbfd89858730ead5e9d02487bb285ac47ade007bd8da26c17386ef4856f060a4e5345a11c3c4d9a5ffd822316ac75713ece9b847df2e246a666330ec49578c9c7ca48f82970d14e9abf6153b7796af13afba38ef3001d0e0aa300c8ba66771260e33ceb5c3e2453918ff3c4cf559d233f25a95a71dad562d07a4594bc11990047ed8b1bc115b376ae331cbbfddea6a11732bba59d1b3d9a2", 0xdd}, {&(0x7f0000001480)="8dcaaa29f99e46c80e07ed8a2230a6061e715ae8c65c3cf01946fe9bb8d590cd3420c73e0f2846be02d9e32a88f14bb3bdd082d5e9ddec281fff15776428a699b35a0bea7356b966f291d376e11eaeb8024eadc4baa638073a25bdb91a07e9298cdc36044bc75b9981586d6149bdf097a5", 0x71}, {&(0x7f0000001500)="4d72c8ce512cd74c5c843b62bbd0d04ca0077c2e53c41cf42d7e2515ad0b358ef9409a92ad1d31c9aa180e0a80f7023189e34b3265ed5af45dc11434294b4bf6eecb106e50cc0e5d7658106077708e1a41ebc31d05efa4f905edb491b6cac4e5e353405553620187af3778138e135684623191a2454408b54784820617519fc006f006fa8ffa0444a70c305c4108ea46fd680ea3e203c5d094ff2bddf5e1cae0f44d2e0a84e824cc8eca76cdc1fa5e3effdc35a676d398d6099374355436eb3622141f9035866c926c851a83a269aa12db12", 0xd2}], 0x7, &(0x7f0000001680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @loopback}}}], 0x40}, 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="d7c07d0e23121ffb872ea42ceb82662a", 0x10)

[  328.568502] 9pnet: Could not find request transport: f�
[  328.603359] 9pnet: Could not find request transport: f�
07:06:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0)

07:06:03 executing program 7:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x40e5, &(0x7f0000000000), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0)

[  328.651942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.661953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.679914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:15 executing program 3:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:15 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xe08000000, 0x8300, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x2000, 0xc24, 0xfff, 0x8, 0x800, 0x5, 0x2, 0x0, 0x93f2, 0x0, 0x3ddf})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x0, @local}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

07:06:15 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x400000, 0x0, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = getpgid(0x0)
r3 = fork()
kcmp(r3, r2, 0x0, r1, r1)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x81, 0x9, 0x0, 0xe1, 0x0, 0x893d, 0xc421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4d42, 0x0, @perf_config_ext={0xffffffff975b269c, 0xdf}, 0x402, 0x69, 0x9, 0x4, 0x59d, 0x401, 0x100, 0x0, 0x3, 0x0, 0x59ed1fc7}, r3, 0x5, 0xffffffffffffffff, 0x2)
truncate(&(0x7f0000000040)='./file0\x00', 0x200)

07:06:15 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0)

07:06:15 executing program 5:
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xc0201, 0x2, 0x5}, 0x18)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c54)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11000000309663d6c4d8176b50d572610000000000000000"]})

[  341.155618] 9pnet: Could not find request transport: f�
07:06:16 executing program 7:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x120)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x2, 0x3, 0x9cd7})
pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="12a443dda2a74edd72c4cdf02dcf10ed1eaa52325bcb87a8fa0fdfc062c07bb770778f0259e4b09534593eb80700990260", 0x31}, {&(0x7f00000001c0)="aa77c02dbf647a4d8d5e41102d40d481a8698ac6c4719e599d0ffe082efdcf36f6a3e9916321865f77757b01989121d8f091c66efb3460115b52bea77da8f42a1ae23642b3aaf3e470c6a0ff43752e6e35822451d3da461fe0e00b958168c6563e2d8f035238c403d3ff1e1da5164e0c29121afe8ec29e666a", 0x79}, {&(0x7f0000000240)="82223ee900da18844c2b903ed1385e29f84f65517e39e96b45a2fc701e0db188d3dd5e052e22a4e24533a1e47765eaf134c74df2976c1a194c1df96f1b9070701815d5c5d1e2f304e02cd7cc753f9f2655cf73abf89cfbe7a55c87f819ece46d864194c5ecf3bd00dfba715c9d4fdb52e587b17b11d99cda11b90a0bbb94baf50f8dd083cee59990887f9dccbdb554576e1474da5471207fdd2002bebda5445dd519c0617fdf59890517bed85a223d9b19733645675fc9bb81199187ce42f64eccbb738aad9d04e971748694f52be4063510aba97b7e61b89ae7b64ed3523ada7b60", 0xe2}, {&(0x7f0000000340)="443104e884e9dd0ccc0aa4a99c3d5e5de0999439c18150814eee887cfcca7c5e6baf40328a672241f8eba0cc908f2addf1408e", 0x33}, {&(0x7f0000000380)="11048e171dbebc175e5ce7797308b2a1280cae653e50e76fe4fa81d1fbb59d4a6c2b23ce6c3ce783770fa8030ec7ebcfa8c2056cc4f59b01d9fe34cc013e907f8718a7459ec1d47600068a83a67d35e494a7dfaf1cfa89abe959db576491e77adb7713d752b2e6a139c882b66d9e8e9481eb759908b130e251323f48c55152b251ef55c0ea89c27ab2dbabcdf64f99dbd0b7cfd7570219f66308cebdcb4ed308eba86b105b456ca69210ef07c3cb61d9f44849f966c55bbdcd6f5e323942af2d8d948e2e44", 0xc5}], 0x5, 0x81, 0x3)
r1 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000d, 0x8010, r0, 0x2a420000)
close(r1)

[  341.221922] 9pnet: Could not find request transport: f�
07:06:16 executing program 3:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  341.225864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.254844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.262924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

07:06:16 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000470008000f801", 0x17}, {0x0, 0x0, 0xa20}], 0x0, &(0x7f0000000300)=ANY=[])
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x60, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x666, 0x5, &(0x7f0000000540)=[{&(0x7f0000000240)="9a9e33db641adea0574659c42a530257784a10da60c803d275278e39783afaad046d6dfe932dcc19f197ec9d72ec67de739cea469354ea7fdb7b055b183754f2c3b8a8ad8fb61e90aab8681def83b21ca00acbd073b681ea17c0de6b61e6e9a1be8a38d18313403be099af9f1fecc291379c72e10e041179b52f30a43c25a392424f41d61c18a79df979a0666a1947ca473c3a4a5b15b77fae76d5dc657166b9fa9f", 0xa2, 0x10000000000}, {&(0x7f0000000300)="98c07eef0483b711da70865c75ebb06274de07bbeb2f29886384a4784774a4979c876fbc6daacd6c4124d53d5ad6a6fea382cd053cf43d8108ac08311c1ebecceade7e2368f5585d9d4cf6f1494d69c8d687931ee31e2ab70ba897b86d0eede2248ceb9ceffdda4ece83b3d12ed214dde41c26d6992394adc1f8aa181b08a464cb8cd2a866c7557849fcdce909497150fc95981becfc6f0dc05ef633604920213afab7d3eada8bd1856acdd28017fc5d28285938d06fb8edeefd6c3c6c5acaf75b5f632b2a361875f62402561f46655a3106b5", 0xd3, 0x101}, {&(0x7f0000000400)="a1690bd2f62779b48fa8d8c8c2feb1d7b1bb036a8b5042d4fe9558761aa6885dcf81bda1d018d91e7686b8cf7170b0d0041aa0cfd8ad543b7675c35776949273bc850e463228e869bb26ca7c4844507924b1b99c30406da6ef5a7b513bdb677dcb3299771cb0cf2a76c8bb65ba6319b1f0c0f8c6978581b68aab678ec99bc42f68", 0x81}, {&(0x7f0000000180)="dda8228e7054da9b1ad214ab7ee1c3a4cef158bdf9197bc4fde68b5274868de2f82f852498de6daa4fe12f44dff3892ca9094efa4acd7149670eda8a44621c5234d1dce147908e6b557fc10d83dd955606c53fa6af26c1142c4541506080a0a348abcf81f0c17394cba5d205f20864d09928ca464210169942bdb852c10f7a", 0x7f, 0x8}, {&(0x7f00000004c0)="0f3286fd814226e9ea315c3c388fe653a86a3fceab861ca8f14c9fce090ef705bd483b3ae2a48a71d763574709cb10ad504a7fa3398d9169e5f0ae5883c869f049c1", 0x42, 0x2}], 0x4000c, &(0x7f00000005c0)={[{@nolazytime}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf6}}, {@commit={'commit', 0x3d, 0x6}}, {@prjquota}, {@nobarrier}, {@nombcache}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3d8d276b}}], [{@smackfsdef={'smackfsdef', 0x3d, '^'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_eq}, {@appraise_type}, {@euid_gt={'euid>', 0xee00}}, {@uid_gt}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'})

07:06:16 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  341.315338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.320616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.342901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:16 executing program 7:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x300c0, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x4)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x800001a})

07:06:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

[  341.401694] loop5: detected capacity change from 0 to 10
[  341.418861] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  341.422349] FAT-fs (loop5): Directory bread(block 10) failed
[  341.423857] FAT-fs (loop5): Directory bread(block 11) failed
[  341.443061] FAT-fs (loop5): Directory bread(block 10) failed
[  341.447615] 9pnet: Could not find request transport: f�
[  341.450232] FAT-fs (loop5): Directory bread(block 11) failed
07:06:16 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901", 0x5, 0xc000}], 0x0, &(0x7f0000013b00))
listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=""/198, 0xc6)
mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40048, &(0x7f0000000140)=ANY=[@ANYBLOB='memory_recursiveprot,nsdelegate,audit,func=POLICY_CHECK:fsmagic=0x0000000000001152,\x00'])

[  341.473850] FAT-fs (loop5): Directory bread(block 10) failed
[  341.478520] FAT-fs (loop5): Directory bread(block 11) failed
[  341.482316] FAT-fs (loop5): Directory bread(block 10) failed
[  341.485540] FAT-fs (loop5): Directory bread(block 11) failed
[  341.512419] loop7: detected capacity change from 0 to 1024
[  341.523719] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #4: comm syz-executor.7: iget: special inode unallocated
[  341.525811] EXT4-fs error (device loop7): ext4_quota_enable:7126: comm syz-executor.7: Bad quota inode: 4, type: 1
[  341.528827] EXT4-fs warning (device loop7): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  341.530895] EXT4-fs (loop7): mount failed
[  341.549728] loop7: detected capacity change from 0 to 1024
[  341.560672] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #4: comm syz-executor.7: iget: special inode unallocated
[  341.563786] EXT4-fs error (device loop7): ext4_quota_enable:7126: comm syz-executor.7: Bad quota inode: 4, type: 1
[  341.565872] EXT4-fs warning (device loop7): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  341.569460] EXT4-fs (loop7): mount failed
07:06:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:24 executing program 5:
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x19c, 0x10, 0x9, 0x101, 0x70bd25, 0x25dfdbfe, {0x3, 0x0, 0x9}, [@nested={0x141, 0x7d, 0x0, 0x1, [@generic="9cc894edcdf47fb2ee51e26c190145949261d6d3c25073d61cdd205fce50", @generic="f055270a03305b6dcc8c755b8f15b8748fdb095267fd1eb1203d551a889830849cecc95833bc1e98c9a8d8ce6f900d3076a3054b244eb3b73d4d98521f0b8f526b2cb5bee05671a039150e5fb2323ce0c4a0f42980842355f402aa594f6db65325b6a7152536d30adad522326bc6baac51d7884f811fd3c83572c9f231449680434e34aff64e65fe935824bd74c142d16024570f19e8b04d4051ef11c4d6c511e360b852ef192a3105ce1653c1eb553692de72851f043debd7933e99a578026da32fc1a4f8db4761b22af683c44ca4e85586f81e8d2058c4d4f7bc15dd7b1f9d947d01f4", @generic="7498f43ebf5eb16db55034f56fb09da4ea3b823fc23db0ff2ef90cea28aed0dfd862c6901d4466307fffd4861a79c1017998248647fb79ac94b61a"]}, @generic="4eab707e8ae72f69ad883bfa1455be17960a32d7319cf115a4c4b1b80bf2585be5b1242f1b7ad4f93d044f7011d7f0", @typed={0x13, 0x8c, 0x0, 0x0, @binary="23888ca1c3df450c73ae851bd1f90c"}]}, 0x19c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x11)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

07:06:24 executing program 3:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:24 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011400)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f1112070000002c00"])

07:06:24 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="011e00000000000000002b000000"], 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x4040890)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="d8126539d88bf0a06047f475d0", @ANYRESOCT=r4, @ANYBLOB="01002dbd709900010000806c0000000800c9006c0900000500190104000000a3002a000406133f040009007206030303030b03710702ff000100024872060303030303037e15e440620802110000013c7700000300000002000000840f000100"/111], 0xba}, 0x1, 0x0, 0x0, 0x64}, 0x20000000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = openat$incfs(r3, &(0x7f0000000400)='.pending_reads\x00', 0x42000, 0x0)
syz_io_uring_setup(0x760e, &(0x7f0000000480)={0x0, 0xa6da, 0x0, 0x0, 0x39, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540))
r7 = accept4$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x80800)
getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0xeb, "574a0ff974aed4d21406344cad469276c69efa23f90093e87550926eb293717420630337730fc8fd53baac6f1806661f6986547b32f1e0391ec3dc34439efdfc80e3793a20d5f0b770d89bfecfba7b3a380850fcafd96e16334c54c55761f9b87120d04446fa52af655689751c83465fd9c48ffe74e0752515751b425cb1f273e74ea37256bcabb5af94f9ec8ffeee1a8b8bb057212e153e95b2ef5ccc65308e59849c41e6efd621c1db45623b0b286f697160eb76add45642ddb0c55859a050dd76b50706b163b7adf526b1210e39b8ef464e694b75d8bbbecab9f8b63916632e20ea309f4b18a85a3a7b"}, &(0x7f0000000140)=0x10f)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r8=>r4, {<r9=>r5}}, './file0\x00'})
fcntl$setstatus(r9, 0x4, 0x26000)
r10 = fcntl$getown(r8, 0x9)
r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x59, 0x0, 0x1f, 0x0, 0x2, 0x24, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x4, 0x8000, 0x5, 0x93e1, 0xdd8, 0x3f, 0x0, 0x7fffffff}, r10, 0x10, r11, 0xa)

07:06:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:24 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

07:06:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

[  349.852675] Zero length message leads to an empty skb
[  349.855629] loop6: detected capacity change from 0 to 240
07:06:24 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1)
syz_mount_image$tmpfs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='mpol=prefer=r\x00\x00\x00\x00\x00\x00\x00\x00\x00'])

[  349.872700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.874017] iso9660: Unknown parameter 'no'
[  349.893753] loop6: detected capacity change from 0 to 240
[  349.898059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.905920] iso9660: Unknown parameter 'no'
07:06:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

[  349.925133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.938523] tmpfs: Bad value for 'mpol'
[  349.942913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:24 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  349.965379] 9pnet: Could not find request transport: f�
[  349.976212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:24 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  349.997525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.005336] tmpfs: Bad value for 'mpol'
07:06:24 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x10000, 0x1)
openat(r0, &(0x7f0000000880)='./file1\x00', 0x4a082, 0x88)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x800, 0xff, 0x0, "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"})

07:06:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

[  350.100116] 9pnet: Could not find request transport: f�
[  350.112042] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
07:06:25 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  350.203506] 9pnet: Could not find request transport: f�
07:06:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:33 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r2 = creat(&(0x7f0000000240)='./cgroup/pids.max\x00', 0x101)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r4 = fork()
r5 = fork()
r6 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4421016}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x110, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe0, 0xa9, @random="d677c4d10ec7f61b12c6ed86096665cb7370b5cd11d094d700f64b74ae8b945ed16c6cbbcd93983ed90e12171807f797bcaad5e93312e0d56ce375693c69221bebceb02e8d1b922f08173aa21b2fba7d40eb8577aeef7f9f8b8ac422b6d7321ae40cc0508c7cf55c346e8c4b425a78e476c87839eb3fe92c75181174897333bdec51da6698b5e5e84abf801c0ce2695ab6dbde2de536a9dc198b1441f1af6f8edb4a7da1df900686171b7010846fdfa34353ea2211d9fb37060b7430e836f7acb932935c66088da31a4e884e05a329cfe9af1158f2b11e7969d7391c"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfff}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0xc845)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
setxattr(&(0x7f0000000080)='./cgroup/pids.max\x00', &(0x7f00000000c0)=@random={'security.', '\x00'}, &(0x7f0000000000)='\x00', 0x1, 0x2)

07:06:33 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

07:06:33 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5314, &(0x7f0000000000)={"09a046c7719da695727bcbb7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = memfd_secret(0x80000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x3, 0xce, &(0x7f0000000040)="3e4ba3a5d761a72f5461b7e98703f6991cda98403cfe64db1d7ad6a45a94b3e06f5807f6d0bdcad3dc7d926112a75ced727e61aec3df7952941e3f07765da3dcc8681604b9ce1bba93e0a4bdafbaa647a853ce3940099117c7ef64b3b02f078acdd0543e1d222edd3cf1a405a6e9a0908138b8d44b46a56036abc9cb61f89bdc8b890959496d07cffcccd3e60d837ee5b747abeb84f3c3b4b7297379aa7571b3e2acee4daed143bcc06ab3e6064360c170c9b3aec1e6ea13f6511b6149446fe8d4946788f933a657c64a719bead3"})

07:06:33 executing program 7:
setresuid(0x0, 0xee01, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)={0x0, 0x0})

07:06:33 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  358.316320] 9pnet: Could not find request transport: f�
[  358.344602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.356108] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  358.373537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:33 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2, 0xffffffffffffff7e})
r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x800, 0x84}, 0x18)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000140))
preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004640)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)

07:06:33 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

[  358.405907] 9pnet: Could not find request transport: f�
[  358.425759] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  358.429359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.460697] 9pnet: Could not find request transport: f�
[  358.473086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:33 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000040)=<r0=>0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = fork()
r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))
mknodat$loop(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1)
faccessat2(r3, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
rt_tgsigqueueinfo(r1, r2, 0x15, &(0x7f00000002c0)={0x0, 0xfff, 0x7})
r4 = getpgrp(r1)
r5 = fork()
sched_getscheduler(r5)
r6 = fork()
rt_tgsigqueueinfo(r4, r6, 0x15, &(0x7f00000002c0)={0x32, 0xfff, 0x7})
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00')
pread64(r7, &(0x7f0000000040)=""/208, 0xd0, 0x839c)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1f, 0x5, 0x5, 0x1, 0x0, 0x3, 0x40, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x6, @perf_config_ext={0x55a, 0x7aaed5f4}, 0x4, 0x200000000000000, 0x5, 0x9, 0x7, 0x9, 0x8, 0x0, 0x7f, 0x0, 0x400}, r4, 0x2, r7, 0x3)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000001b80)='r', 0x1}])

07:06:33 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  358.501341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:33 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  358.591585] 9pnet: Could not find request transport: f�
07:06:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

07:06:33 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  358.719438] 9pnet: Could not find request transport: f�
[  358.786408] 9pnet: Could not find request transport: f�
[  358.934568] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  358.935480] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  358.936039] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  358.936749] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00
[  358.937505] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0
[  358.949366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.949902] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.950632] Buffer I/O error on dev sr0, logical block 0, async page read
[  358.956241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.956702] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.957399] Buffer I/O error on dev sr0, logical block 1, async page read
[  358.968255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.969664] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.971044] Buffer I/O error on dev sr0, logical block 2, async page read
[  358.975836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.977046] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.978850] Buffer I/O error on dev sr0, logical block 3, async page read
[  358.981416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.982389] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.983715] Buffer I/O error on dev sr0, logical block 4, async page read
[  358.985686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.986919] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.988317] Buffer I/O error on dev sr0, logical block 5, async page read
[  358.990387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.991580] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.992933] Buffer I/O error on dev sr0, logical block 6, async page read
[  358.994917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  358.996136] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  358.997412] Buffer I/O error on dev sr0, logical block 7, async page read
07:06:42 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2800)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000010000", 0x5c, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])

07:06:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

07:06:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:42 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xae02}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000240)='.\x00', 0xc2)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rf\x1d\xfbj'}}], [{@seclabel}]}})

07:06:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000040)=<r0=>0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = fork()
r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))
mknodat$loop(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1)
faccessat2(r3, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
rt_tgsigqueueinfo(r1, r2, 0x15, &(0x7f00000002c0)={0x0, 0xfff, 0x7})
r4 = getpgrp(r1)
r5 = fork()
sched_getscheduler(r5)
r6 = fork()
rt_tgsigqueueinfo(r4, r6, 0x15, &(0x7f00000002c0)={0x32, 0xfff, 0x7})
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00')
pread64(r7, &(0x7f0000000040)=""/208, 0xd0, 0x839c)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1f, 0x5, 0x5, 0x1, 0x0, 0x3, 0x40, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x6, @perf_config_ext={0x55a, 0x7aaed5f4}, 0x4, 0x200000000000000, 0x5, 0x9, 0x7, 0x9, 0x8, 0x0, 0x7f, 0x0, 0x400}, r4, 0x2, r7, 0x3)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000001b80)='r', 0x1}])

07:06:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:42 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:42 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000380))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{0x20, 0x4}, {0x3, 0x8}, 0x7, 0x1, 0x3})
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0)
setregid(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

07:06:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

[  367.576371] loop7: detected capacity change from 0 to 512
[  367.596794] 9pnet: Could not find request transport: f�
[  367.615240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.623740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  367.655684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.732853] 9pnet: Could not find request transport: f�
[  367.740589] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
07:06:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

[  367.798518] 9pnet: Could not find request transport: f�
[  367.896589] 9pnet: Could not find request transport: f�
[  368.026890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.027420] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.028122] Buffer I/O error on dev sr0, logical block 0, async page read
[  368.030213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.030682] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.031381] Buffer I/O error on dev sr0, logical block 1, async page read
[  368.034280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.034739] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.035601] Buffer I/O error on dev sr0, logical block 2, async page read
[  368.040225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.040685] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.041421] Buffer I/O error on dev sr0, logical block 3, async page read
[  368.046246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.046717] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.047470] Buffer I/O error on dev sr0, logical block 4, async page read
[  368.050167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.050624] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.051394] Buffer I/O error on dev sr0, logical block 5, async page read
[  368.056313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.056784] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.057640] Buffer I/O error on dev sr0, logical block 6, async page read
[  368.061169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  368.061650] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  368.062432] Buffer I/O error on dev sr0, logical block 7, async page read
07:06:51 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x3004, 0x401, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/75)

07:06:51 executing program 6:
mlockall(0x3)
shmget$private(0x0, 0xf000, 0x2, &(0x7f0000fef000/0xf000)=nil)
munmap(&(0x7f00008a9000/0x2000)=nil, 0x2000)

07:06:51 executing program 4:
io_setup(0x2, &(0x7f0000000080)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
io_pgetevents(r0, 0x1, 0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8})
r1 = syz_open_dev$rtc(&(0x7f00000001c0), 0x7, 0xb0200)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x8840, 0x0)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001e80)='cgroup.procs\x00', 0x2, 0x0)
fsetxattr(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="73656375726974792e7766646e6fbf059b18f750fc525e7bca956d21b48f4fbd604f11e2535272304c8af54759f163088ad0a2953c3f5be5b89f5d281b58cae186dd60fd3b22ce307b2d808d54a4117fe7fc08598f61cd257311a8d4ee983128a430b9e9137b7a9498a22f5aa20fde40f970f30221c6bd1a3c0acbf7e9303fa57ac9f0dffa1b4db49d181ab213e41799c2b07c105e81678d66be76a97fb356b32bdaa991c3dfb2945da1383189dec6a7fb022b0b330d1e74f04e2f619b0f93d730d462a7c1a4d6e668677c97c6fa"], &(0x7f0000001e40)='(\x00', 0x2, 0x1)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat2(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x440041, 0xa8, 0x3}, 0x18)
r8 = open(&(0x7f0000000b00)='./file0\x00', 0x8600, 0x1)
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r0, 0x8, &(0x7f0000001cc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x7f, r1, &(0x7f0000000480)="67f58ad7d945ce71c0b12e0ea4ba62b3cbb187767350e71c4cd8fa42062680b6c4b1a32070c57ec585adf7b40f73fcb8b08a2b30ba75ce4b5b365ea7892fc730561aa1ad0c5cb19a11b737f3c7f8ce44d2a7037998050f4f48e80ec9fbdebbcc050b1d5ab2e56d5abcfecc089bd631648d23915f2fa4d74180a5d14d9e63433eb83e45b9e1d1af20b977a4636bcd7aea3aae9b29affa", 0x96, 0x95, 0x0, 0x1, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x1, r3, &(0x7f00000005c0)="f9b34f85d857f8a6314089552a", 0xd, 0x1000, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000640)="6e3145119bf977b324034157a6ebc516bb9037bf3a3d3cca4b91b6b9d44da2aeed4d0580657f45a81b32ada15262df32e9a91667482d6c11aa3889b90b3fd235aa1c7a3bfa555c14387168bcf38dcdb0d88598e2bc0a08698e158213b0dc7ea032e1f3663f5ae1f74593059d1466f5971e02bda1515a90710d666a1bec62bd8dda479c2ddd29d8d56a1aed5b417ba7c657af8f3548cd10e34a0a1302f0d531f2be8a3a7427eeb2f45f4580a018d613654c41737d572f30be5e5a43240034ec4ea66d58209ea9b2c1bd9d4f0c2e0f4b955f2db1239ec1c3c7df0fcc938e9bbc09b979a4ea580bdc540d77f67ab25a33fe57b53b22c2", 0xf5, 0xffffffff7fffffff, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f0000000780)="c0dd7cb656880e2b8799d9550e4cfbb886a20fd3b72e46a6d70e3c77450b926adfba5e31d1bb3542969f2f9b04f6ab22ec2af6f1c727520be38c9815b146b9b13429c27f8737edbbc0bb4750bac3c4e3a752ad68159b3fe007ca337ce835946e678f6eaa24afae11c60a07a83acd9c40ac801f49ab5d0860469852a81d266e6020e93cae21a8cf5383af1396d54cbe26c98eb9a3e84ac979a8e6e9531d3d781372dd4b24386406d3827c78ee845ddc922b7292d7623edac7b0b5c320feb9fbe98632749dd29f385ea723f48a0c24fc5a7d020d4a5d3258ee0260c7722706b8a90d8d0bcbb99a9d", 0xe7, 0xfff, 0x0, 0x3, r5}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000008c0)="8589bb5412a9ce6275f922e95775d403850cf49c44195ccf6813ba7fdf0d0fb0fb6c55dc2424482a6882c5db25c6e017dc72f9b0b413eb9a31a91f255449dbb25155cd0013869273d6aba9ba031c7f6a40149df053d0d2d248f760449d35dc01c2a90d25aca4dc26a6362fc8ac9f0928248e2a86d31896bc85445b9d3a2770fb678a0272384df711568ebb8effe17419dce9262759e79cf1dc9cb66d156ce7bd12ef0b3f2e63573676fa49ca00979a64a386a983bdf6a75c05994153f060a31acee4fef626b28c1fd6dbc1df04eedf74e4c6ad630b118047ad898b9bd8561208d979", 0xe2, 0x1000, 0x0, 0x2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000000a00)="afb918c7c3121167d4f11cf9c13ebdd9cc8e6449b4df7908694b8b524dfcc131b3f1b3ff5518af2d8db7882e96f0773f2e94b5", 0x33, 0x4, 0x0, 0x3, r7}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x200, r8, &(0x7f0000000b40)="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", 0x1000, 0x9, 0x0, 0x2, r9}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000001b80)="7d214b81c7708caae59234413fc6c8d496aa54aae2e0d86b20e77b336d4f8617f1d595306773a9fc1b60c5098a9def61f06c22360f4e136d3b10ed6f945a1bb3ead423b3f35885aad589e642c649ee84cd0f95c02818df5a4cc1363172ffa22349688772d30a86c13a0d7e7f3be5457cf959c4aca7440975bece2e8670336c653dbd1e0dc63e613452ab58b908cf7ef94af8ac3253213a62238badd8ad019b96ae44fd0dcbce078fae7cf1ec98a1656c83881537e2a0523f2906d1d762fc72744600396afd4c5775ed0e6d8f42641d32868f4e3fc275ee58a3565e2c8e8e40d964579c64dcb4", 0xe6, 0x786, 0x0, 0x2}])
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='=', @ANYRESHEX=r10, @ANYBLOB='n\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r11, @ANYBLOB="2c616e616d653d7766646e6fbf059b18f750fc520eb90cf92ac2b0b14fbd604f11e2535272304c8af54759f163088ad0a2953c3f5be5b89f5d281b58cae186dd60fd3b22ce307b2d808d54a4117fe7fc08598f61cd257311a8d4ee983128a430b9e9137b7a9498a22f58a20fde40f970f30221c6bdf7e9303fa57ac9f0dffa1b4db49d181ab213e41799c2b07c105e81678d66be76a97fb356b32bdaa9b2945da1383189dec6a7fb022b0b330d1e74f04e2f619b0f93d730d462a7c1a4d6e668677c97c6fa18e0501d2c00"])

07:06:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

07:06:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:06:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:06:51 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2800)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b00000000010000", 0x5c, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])

[  376.241704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:06:51 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x25, 0x15, "2e9c54987b90502f"})
ioctl$TIOCSPTLCK(r0, 0x540b, 0x0)

[  376.298906] 9pnet: Could not find request transport: f�
07:06:51 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  376.311573] loop7: detected capacity change from 0 to 512
07:06:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  376.367625] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.396800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.462057] 9pnet: Could not find request transport: f�
07:07:01 executing program 4:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200), 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x3)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)={0x13})
perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x1)
fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee00)
readahead(0xffffffffffffffff, 0x7, 0x4de)

07:07:01 executing program 6:
sync()
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000ff01000000004000000040000020000000d3f4655fd4f4855f0100ffff53ef", 0x3a, 0x7ff}], 0x80, &(0x7f0000000080))

07:07:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:01 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

07:07:01 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='vlan0\x00')
pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000300)="e2", 0x1}], 0x1, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000003c0)={'broute\x00', 0x0, 0x1, 0xf8, [0x0, 0xfff, 0xe0df, 0x80000000000004, 0xd155, 0x8], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000540)=""/248}, &(0x7f00000002c0)=0x78)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9})
sendfile(r0, r0, &(0x7f0000000180)=0x95, 0x9)
creat(&(0x7f0000000380)='./file0\x00', 0x110)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000))
syz_open_dev$mouse(&(0x7f0000000140), 0x800, 0x46d9a51216634cf1)

07:07:01 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38383037323533333400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000713aa3a4ba984e5d8a0373c06ca5ba29010000000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="2000000060ed753160ed753100000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000011100)="ed4100003c000000def4655fdef4655fdef4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000322728ea0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000def4655fdef4655fdef4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feb0eba70000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000def4655fdef4655fdef4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3838303732353333342f66696c65302f66696c653000000000000000000000000000000000000000000000e06e12cc0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="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", 0x1a0, 0x2200}, {&(0x7f0000011600)="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", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ec5fa60493804dff2c010f9f44ce2bf200"])

07:07:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:07:01 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  386.762012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.764824] loop7: detected capacity change from 0 to 512
[  386.770570] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted
07:07:01 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
acct(&(0x7f0000000180)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x400000, 0x2)

[  386.794621] loop6: detected capacity change from 0 to 7
07:07:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

[  386.852460] 9pnet: Could not find request transport: f�
[  386.876859] ext4: Unknown parameter '�_���M�'
[  386.883424] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
07:07:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  386.920513] loop7: detected capacity change from 0 to 512
[  386.937536] ext4: Unknown parameter '�_���M�'
07:07:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x70}}, 0x0)

07:07:01 executing program 7:
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x202080, 0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x7f, 0xa2, 0xfb, 0x6, 0x0, 0x9c3, 0x80000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x8}, 0x40, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x20, 0x0, 0x8, 0x0, 0x2}, r0, 0xb, r1, 0x2)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4, 0x4, &(0x7f0000000280)=[{&(0x7f0000000180)="d6324533f7a8", 0x6, 0x8001}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000001c0)="9f4b0a2a41009300383500b7ad96868406bfed8370fcc2904a642504806321996a8cffb1e85140d3697d9b34ed17f4bdf62fdb5d6909f635ea9f99eeb6d90126f0955d25295d8f83ed3c2cfea5af6599713a008e4361a448a694cf6e8917961a943e77be52838f73b7fb2e1fef47e3a02ec7a7", 0x73, 0xfffffffffffffff7}, {&(0x7f0000000240)="d7de3c848f9ebfbd311d87e961098523b8bd41fec6acf675e2a00e467d2c154ef2a6cebf87373b4cb370c8113c82355c54adfc", 0x33, 0x8}], 0x811000, &(0x7f0000001400)={[{@utf8no}], [{@measure}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@audit}]})
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0xffffffc2}, {0x0, 0x3}]}, 0x18, 0x0)

07:07:01 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:01 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x80, 0x3, 0x8, 0x0, 0x0, 0x101, 0x20000, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x9}, 0x40, 0x400, 0x8, 0x2, 0x800, 0x8, 0x4, 0x0, 0x1000, 0x0, 0xc75c}, 0xffffffffffffffff, 0x3, r0, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x6, 0x2, 0x7, 0x0, 0xab98, 0x1d0a0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2041, 0x4, 0xfffffff8, 0x3, 0xfffffffffffffffb, 0x4, 0x4f9f, 0x0, 0x401, 0x0, 0x8000}, 0xffffffffffffffff, 0x2, r1, 0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x8914, &(0x7f00000000c0)={'wlan0\x00', 0x0})

07:07:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0)

07:07:01 executing program 6:
sync()
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000ff01000000004000000040000020000000d3f4655fd4f4855f0100ffff53ef", 0x3a, 0x7ff}], 0x80, &(0x7f0000000080))

07:07:02 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0)

[  387.166595] loop7: detected capacity change from 0 to 16383
[  387.231261] 9pnet: Could not find request transport: f�
[  387.232766] loop6: detected capacity change from 0 to 7
[  387.253025] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
07:07:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:11 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x80, 0x3, 0x8, 0x0, 0x0, 0x101, 0x20000, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x9}, 0x40, 0x400, 0x8, 0x2, 0x800, 0x8, 0x4, 0x0, 0x1000, 0x0, 0xc75c}, 0xffffffffffffffff, 0x3, r0, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x6, 0x2, 0x7, 0x0, 0xab98, 0x1d0a0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2041, 0x4, 0xfffffff8, 0x3, 0xfffffffffffffffb, 0x4, 0x4f9f, 0x0, 0x401, 0x0, 0x8000}, 0xffffffffffffffff, 0x2, r1, 0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x8914, &(0x7f00000000c0)={'wlan0\x00', 0x0})

07:07:11 executing program 6:
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = getpgid(0x0)
r4 = fork()
kcmp(r4, r3, 0x0, r2, r2)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1001, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x93, 0x20000000000}, 0x2001, 0xffff, 0x200, 0x8, 0x9, 0x6, 0x101, 0x0, 0x90000, 0x0, 0xf30}, 0xffffffffffffffff, 0x9, r0, 0xa)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x40, 0x81, 0x3, 0xb3, 0x0, 0x1, 0x240, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x3, @perf_bp={&(0x7f0000000000), 0x5}, 0x8, 0xfffffffffffffff9, 0x2, 0x3, 0x7ff, 0x4, 0x9, 0x0, 0x3}, r4, 0x7, r5, 0x2)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x7fff}, 0xe)

07:07:11 executing program 7:
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000280)="8800170000000000001700080000000008007803140b2a3a080200000100000101cbd097abed5a3b8bb7f609627186466a6c9c5bcc498a47a8d7fa997eb271a5e10d86b14586ad8133830c4fe292e506c1f6fcbc8f48520d317029c07c9e40868038bfc592615ec1ff306a2e3d5057d9be521e59c1365eee0e2d36d43517f04e1e093f54c26f241d2506f3b5277270d263d359d0161248fa057b8e1602995c5fd019a3769057751099d0b9c1bb8d859453789fbdc92e646e9b3e9040bf80", 0xbe, 0xb800}], 0x0, &(0x7f0000011700))
mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x80021, &(0x7f0000000140)='\xb8\xb8\x00')

07:07:11 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0)

07:07:11 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000470008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000300)=ANY=[])
setresuid(0x0, 0xee01, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x1000)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setfsuid(r3)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2000)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresgid(&(0x7f0000000400)=<r6=>0x0, &(0x7f0000000440), &(0x7f0000000480))
setxattr$system_posix_acl(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x940e65625a36e770}, [{0x2, 0x0, r3}, {0x2, 0x3, r1}, {0x2, 0x4, r1}, {0x2, 0xac53b76f8549ef77, r1}], {0x4, 0x4}, [{0x8, 0x7, r4}, {0x8, 0x4, r5}, {0x8, 0x5, r2}, {0x8, 0x0, r2}, {0x8, 0x4, r6}], {0x10, 0x6}, {0x20, 0x2}}, 0x6c, 0x2)
creat(&(0x7f00000005c0)='./file0/file0\x00', 0x90)
utimes(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500))

07:07:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

[  396.260562] loop7: detected capacity change from 0 to 184
[  396.264879] loop5: detected capacity change from 0 to 1
[  396.283939] FAT-fs (loop5): Directory bread(block 5) failed
[  396.292276] FAT-fs (loop5): Directory bread(block 6) failed
[  396.293175] FAT-fs (loop5): Directory bread(block 7) failed
[  396.302593] FAT-fs (loop5): Directory bread(block 8) failed
[  396.308789] FAT-fs (loop5): Directory bread(block 9) failed
[  396.309676] FAT-fs (loop5): Directory bread(block 10) failed
[  396.317798] FAT-fs (loop5): Directory bread(block 11) failed
[  396.335849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.367687] FAT-fs (loop5): Directory bread(block 5) failed
07:07:11 executing program 4:
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)='/dev/sr0\x00')
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x26)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x1000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
r3 = signalfd(r2, &(0x7f0000000140)={[0xffff]}, 0x8)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {<r4=>0xffffffffffffffff}}, './file0\x00'})
openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x101100, 0x94)
r5 = add_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="223705fe8a32e2584104c9af5d73a5acbeddc07518bae251f39cdb3be6bc6dd7479b7d827c7a9587a7dafc6d2ea0c9da805fb97eaeb3caaf59115558334d3c3cc8f5f9bbd84b3f639316b16047ebde16a84c72787aa3988950f15f37c3dd9e3205c6f2bac3f69d40e997984491c88febfe489b5d7b208df3b764266adca6388b39c822dc43976bd1e557811134c9033c49f0593e22433a7305bfae4e35fdd610d2d6323abda6cd3ddf5b58508b94e167a34acffad1ffcd6b6266aec640dc001d6cdc7147f30371f246992387f12e5d6693d505cfeb2b28ba75", 0xd9, 0xfffffffffffffff8)
keyctl$get_persistent(0x16, 0xee00, r5)
writev(r3, &(0x7f0000000380), 0x5)

[  396.375612] FAT-fs (loop5): Directory bread(block 6) failed
[  396.379145] FAT-fs (loop5): Directory bread(block 7) failed
[  396.434889] 9pnet: Could not find request transport: f�
07:07:21 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:07:21 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x4a002)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x1, 0x9, 0x6, "8d"})
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5)

07:07:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000100)={0x3, {{0xa, 0x4e24, 0x1000, @private0, 0x2}}, {{0xa, 0x4e20, 0x1bc, @private2, 0x7ff}}}, 0x108)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x85)
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080))
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040))
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x1}}, 0x14)

07:07:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x0)

07:07:21 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c24268e", @ANYRES16=r1, @ANYBLOB="05000000000000000000440000000808520190db5888e9439af7a9c6a4cf1f830eb9ab5110b9f800b62459842cddb4463605f688195588c3236499eb0962b08a7446ecc5c2599760f0744dd6d5d67247ec225fb60c64d7e61247a2b167762cd4ae9e397f759f5d5ae4f04662a6af23034026b97695c3d6ef48f67d29ddee774ebaf6bb71dd", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x30, 0x1}, {0x48}, {0xfcb050aac4696315}, {0x36}, {0x24}, {0x48}, {0x1b, 0x1}, {0x30}, {0x36, 0x1}, {0xb}, {0x18}, {0x24, 0x1}, {0x9}, {0x6}, {0x30, 0x1}, {0x1, 0x1}, {0x18}, {0x5}, {0x4}, {0x24}, {0x61e543d3732b31f1}, {0x48, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0xb}, {0x9, 0x1}, {0x41}, {0xc}, {0x6, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x24044890}, 0x30000)

07:07:21 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:21 executing program 6:
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = getpgid(0x0)
r4 = fork()
kcmp(r4, r3, 0x0, r2, r2)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1001, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x93, 0x20000000000}, 0x2001, 0xffff, 0x200, 0x8, 0x9, 0x6, 0x101, 0x0, 0x90000, 0x0, 0xf30}, 0xffffffffffffffff, 0x9, r0, 0xa)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x40, 0x81, 0x3, 0xb3, 0x0, 0x1, 0x240, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x3, @perf_bp={&(0x7f0000000000), 0x5}, 0x8, 0xfffffffffffffff9, 0x2, 0x3, 0x7ff, 0x4, 0x9, 0x0, 0x3}, r4, 0x7, r5, 0x2)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x7fff}, 0xe)

07:07:21 executing program 7:
ioperm(0x0, 0x1e, 0xa)
r0 = clone3(&(0x7f0000005880)={0x61021500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = shmget(0x3, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = getpgid(0x0)
r4 = fork()
kcmp(r4, r3, 0x0, r2, r2)
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x1, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x11, 0x80}, 0x200, 0x9, 0x4, 0x6, r0, r3, 0x8370})

07:07:21 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffffe, 0x101081)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x1}, {}, 0x2, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)="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", 0x168, 0x0, &(0x7f0000000280)={0x2, 0xe8, {0x0, 0xc, 0xe, "c96046831b2c16d4f0f7597ef93d", 0xcd, "2e6d7b7514326ed218c3a6926580399a5585a89a7b11dd51afb9ed4a1c0a8c701ac38d1c77678f25998c90b597efb909536846efc59a40ee774157109e64fd1be47e927a1e0c75f8bc2f56d00322dd57833a195058d001509c9c3309ecfe302dfca2ee8538d4e44237238f140a9ebafe9469991d77f50ac386285b1b359894f5e5c5807cae5097f6dfa102b9cb619058f9faee717cbdcbef4b5b4ed9f08ac0a619a721b5439553867057ab62c926bb99af639a5c8157dd2a3d555184ac7b9ba75dbef149bb6ea4e5b63929e59c"}, 0xc6, "f3b10a50c5c0e8d241573ae916c369931c5357e61e16bc613a7170636f2372b1dfa2160210d360a4e0f91601b7a0645989f0f24b888f17425100b3464f24dfd31fad6d5243c2332aa9c4413d574627f97c9ae71bde18b14f7f649415a4e2310fb952b0b82de9e8c5472c5f3ceee6e454445c0ad2588b82bf02b9ef57835948c9ce8d3612ddd295304660c5dee730a5ab28ace508099d32656778fcb3c24db34cac814acd25962f6c446ec9aef96e7bca946b23c741998150c7fb0cbc232768731d241448a66d"}, 0x1ba})

[  407.003714] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  407.025788] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  407.036402] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
07:07:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0)

[  407.082269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:07:21 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:22 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5609, &(0x7f00000005c0))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x1000, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080))
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x40, 0x0, 0x3})

07:07:22 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup2(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x0, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/51, 0x33)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f00000014c0)=[{&(0x7f0000000140)="cd2165250c35fb625f91d7bc6177dfa943c675fb5d74bc793a7b05283e4a41dc97bd42ae6a18491b64fc1cafcbab2a0027fea3fc51d6e47fea2e01165ab3f63074d67158", 0x44, 0x100000001}, {&(0x7f00000001c0)="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", 0x1000, 0x80}, {&(0x7f00000011c0)="c48729791660648e383cf9f24142cc8f347254f8030a1b5b345e820e4f15886c4bb9b8e6e1a8fa1fde7bb5cc28fd66525f3f641298a1421296feba68d507076b1cbad62e1bcac73ee7d7", 0x4a, 0x5}, {&(0x7f0000001240)="ec78b4943d7488701aae5494883cb1bd40562bf940eac0fdd73061f4cbfe45a989cf5cefe34616c44567f9136f9b54009e00780bccc855ac41c22167fccf5fb87e80ee0d9cb4812212c330f053702eac8e922d4e117c2d06ac1105996564968fb9f08e874427c9251c24c5b010bbed70809f47f0d8441069b5f28387def458c9e131b3e31014991b5a1fbc5cc6ad60fb17500d49d658bc7c5de93f8bec76c177f38e76d8", 0xa4, 0x2}, {&(0x7f0000001300)="e38a053a3d161ad25b7aa3081bf67c1b27a18230b6507bd4cf778402accfc6967fa5187746b2d632be744ed2", 0x2c, 0x3}, {&(0x7f0000001340)="d46edce31532a8edd46c8a243ddb816041af88ed2d0f750d663bbd490a3b18e40c7d88b69d6d1029840c2cc1ebb9f89f811e1deb883adfb194c0bed08720f6871d1305ef33967d17d67e0289eff324cecbf2058ca5dae1ebd9df06458535835e0354f18c0062cec68eb0e536304be9e92472f7d71d372268b62b4750930607ee66632df93f986740326da625294fd1184366fdfe5b9610f610e6f9d79bf3ed3d0dfa7a1c0aa19acc802d5d72f6d125f3ca8c938fd4fc91d77e3f2fe7b291cbaa0bacb57e5be7e5a2a5b1acd0aa3b0e7c1c40f25b2dffc75329c3b1a5f7fa5f12679e8a8bb06357b6a638414a347061e5a08ca2", 0xf3, 0x7fff}, {&(0x7f0000001440)="6ba6ae702045a042c4e4256a74c5ea13d1a88f8ddb64254d2f93264db9d11ef14a0e4ad9a0a129c42e4b52804d29b1d2197d6363a993a602cdfed19e61c0061f02", 0x41, 0x7f}], 0x1000, &(0x7f0000001600)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@utf8}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@numtail}, {@utf8no}], [{@euid_gt={'euid>', 0xee01}}, {@hash}, {@hash}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x7000)

[  407.187449] 9pnet: Could not find request transport: f�
07:07:22 executing program 6:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x1, 0x1, {0x0, 0x0, 0x1, 0x0, 0x4}, 0x400})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
setregid(r9, r7)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000005680)=ANY=[@ANYBLOB="110000000100000018000000", @ANYRES32=r0, @ANYBLOB="ffff301100000000"])
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r3}}, 0x58)

[  407.256496] loop4: detected capacity change from 0 to 264192
07:07:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  407.417675] 9pnet: Could not find request transport: f�
07:07:31 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:31 executing program 6:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x1, 0x1, {0x0, 0x0, 0x1, 0x0, 0x4}, 0x400})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
setregid(r9, r7)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000005680)=ANY=[@ANYBLOB="110000000100000018000000", @ANYRES32=r0, @ANYBLOB="ffff301100000000"])
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}})
clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r3}}, 0x58)

07:07:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:07:31 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e34393038313534303400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000028305c8a835f4f4da440baa59e2884cb010040000c00000000000000d5f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000005a00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd6f4655fd6f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012600)="200000003413ec503413ec5000000000d5f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="8081000000c04000d5f4655fd5f4655fd5f4655f00000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000010000000000000000000000000000000000000020000000000000000000000000000000d5f4655f00"/160, 0xa0, 0x4600}, {&(0x7f0000012800)="c041000000300000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x4a00}, {&(0x7f0000012900)="20000000000000000000000000000000d5f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012a00)="ed4100003c000000d6f4655fd6f4655fd6f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000003ba2b893000000000000000000000000000000000000000000000000200000003413ec503413ec503413ec50d6f4655f3413ec500000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012b00)="ed8100001a040000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c37da192000000000000000000000000000000000000000000000000200000003413ec503413ec503413ec50d6f4655f3413ec500000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012c00)="ffa1000026000000d6f4655fd6f4655fd6f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3439303831353430342f66696c65302f66696c653000000000000000000000000000000000000000000000da927999000000000000000000000000000000000000000000000000200000003413ec503413ec503413ec50d6f4655f3413ec500000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012d00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012f00)="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", 0x100, 0x5000}, {&(0x7f0000013000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013400)="504d4d00504d4dffd6f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033350075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000013a00))
r1 = openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x101000, 0x108)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100888, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@fsname}]}})

07:07:31 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:07:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:07:32 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000e00)='d^', 0x2}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x24000050)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @local, 0x8001}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="83477bbfcbf3e8993de5a0f1a4c56a48c073c4e8a4172c7bef49", 0x1a}, {&(0x7f0000000240)="0f3080553027a5a59eb23d2f622c08fb4dbf328aafa7fd70c8c2b49d3b053dffb49e1ae5e868008cc1b0b3c67106aefd252c23b26c8788f25989466739f140a5a392b056010495a41d01867c50c02c57552f32f56a5b2e4a8723443ebc644af9490eb4a39469f6a9455d563d93b07444e7eb410d65a0571774794fcea46eafb6cb34fc75a3ebe328e36ef411c7398dbdb3a6f774b313b19db21831e9feaa96c19c81e6873bca941ac464959b4edcd868b7b1793728fb4d27a86d312c6eafa20230bed029c8ca24cee510919781c7d02189c27a3e3b4ace388a7e5558233b63df95b6544078", 0xe5}], 0x2, &(0x7f0000000480)=[@hopopts={{0xb8, 0x29, 0x36, {0x6c, 0x13, '\x00', [@generic={0x1, 0x97, "4a2e66c150c15678b88fe3127a942943cc60a44409292f5e7c8741b6694cccf3e4134b55687bf741f10ccfe201e61384e562b320b0d7ee0a9b2830a1b5c5a33fbf0383dace9ec0eb08944561b98346f636ce620454044812a2063daa004da1eac75a0e42e1b027bebc2b7a648a68dc89b039c393d59d77469897e5ab146d5a1710e3d0c43e52d66652a40d4f8bc530e2068b0ccd7b7790"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0xd0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @remote, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="dd545b7348b85dcc19e8ec69643b86f99ea142cc575cf1e17bd2c7583eef7f3525cd650c36a5a6bcc02bc5c50ad3abb7a703361d6c98f330999ff3d70bc983f2e0a2e5585db028cfc063cfd63a", 0x4d}, {&(0x7f0000000340)="9d5b450467c092c3d0484e362ddd2bb0e4b383672b381c72128fbef0767e34d993974fbaf725db152de65aff96897cb6c9525bdcf11766a41332aeb1e04137adc84b1da6b6ac771c749097285940687bbf4386555155b825a1275e22b2beac9154ea5842235b6dd1a6f33f9d058a706feaac747defb6290c88d9a54c", 0x7c}, {&(0x7f0000000580)="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", 0xfe}], 0x3, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x86c9}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x32, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @calipso={0x7, 0x18, {0x2, 0x4, 0xd8, 0x100, [0xd69, 0x3]}}, @generic={0xbe, 0xfa, "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"}]}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x1d, 0x19, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x9809, [0x10000, 0x4, 0x80000000, 0x91, 0x0]}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x45}, @calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x60, [0x8, 0xd51e, 0x6, 0x51e7]}}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9f36}, @generic={0x7f, 0x3e, "3dab28098ea016d406cd4b0f4fa402962e60062e05fa0cf4586babc270de934213c0cb1e1d1d5c7a94df8f3b354be4ee8923f677f49a79cc52de9a401464"}, @jumbo={0xc2, 0x4, 0xffffff01}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x62, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0x2, 0x72, "99c5c82311908c61a487ced9ab82a8d42400821b3aaf5f7271fde79918db81f2e662ed2d80511222d78670c0cc69a0fd5d688c9a01181a0b8003f6ce0303fc639d8487566df5d81f0d6ba5758123c20811938d1e3d0edac0305bf2c2dc45af6336befd546cfd1e9507e0b9cd030fb2105dea"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xab}}], 0x338}}, {{&(0x7f00000009c0)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x80000000}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000000a00)="e7fd53a7a017bb8b0b285a774da6bb65619f841f577176363c110f562ec6a7ccfd80f1fbced64f081b5a89bd880b63bbc303ab180be68cadf9d9cf828e03eeacfc272e60eab923651807c2e30918308bb1c144c6480fccabb17cfca0170e8f753a43595a43583aea7d3799ccf23b84d721c6844c47d2f2836677cb1aba6aa7f4a4277b6e8fbc8f76e9eb2feeec920121aecb8bb946dd4c435eacd6983ef90006c7c86f02ed318635e4cb911019736b009d0b9139b25704bc870a55ca3d7ba2d80b83", 0xc2}, {&(0x7f0000000b00)="43ad2f28a2ccbe664caddb43e6cd786429e576b8e7f5321066a144c755f41ee058bcd8f2eb5101e8923386df0af2d552609eee05040b74dc00b6b8354322fbf36c1f", 0x42}, {&(0x7f0000000b80)="e3cc2d1d0bf6ad00a836d7a180068d138cf8dde0dcac552d5ad171384940c1e10665bb89d817c234e7242ed8d46c642fd78c13dfdf75f02154896ab6fbd23f77ab1f3f8ce35fbd6bc8ae503e5b62a2c32fcc72aa2f04917e0c5416ed1162da12832aa6121b83cea6ee1ccb21eb7dfe3e03b7e91097fe6c0156c08292b7e00d8a6e420f55e4744683c2bc83f319bad9ca07b58acb7c391664d7ce4cb1153b31fc8a9f3abde5bb571ef06d92a3a5a00aaa3e2bd5e1967d90296c36c18030b0", 0xbe}, {&(0x7f0000000c40)="7acbc097dc886af5ce3629ddc50aa994b22054792d2c5509a5ffd4eab1e058e5539b9d01a35ce1607522d726c0dcee4eee8670e8a17cb829ff40f7d52011c80c1d086a1ff3c60f045256e52efcd44f22198b2b7178f3cb95b017906f83164023e9e30c67e9e525017f320efb0f0d6d7299b68c0f6289b83bb7fd208e7e03f6e29c5423ba9edd4140ba9241036f7aa95855097b4ecb5c111369c50bca668afd3b7d722e1091a4169e63c58c234d73e968b1f14ede1904c0a1bdf21b2907d787fb8bc24ccb5a02171961a60f40b1badd0cfc46fd01e09b75e3ac75a65931c1", 0xde}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000d40)="4a2600d2b193a39e6d95e878e0000e", 0xf}, {&(0x7f0000001e40)="5d19427a8c16c67f72591a0f72b57d1f0e634196e6040cfc8f0a0e06e1599e6cc7c900a6fd23f28dd44ca5221ed31a0912fbf445117815a4b0d67868857ffa959211448fe4e8b6885c29ceba416a6df45c6be0d6fd42e4e366c5ebf0a07376e716669096198891a3d219ff5939bb89ae2b34ecb5677f33ef9c1013a9e1348dac463a88c340eb803ebab82f261266f3e7c501ad08e5929dcd93dfd4e094d551873a36424481c7ab5e30203d0ed01117c5a8a3b63020b06f7b7530b9607ca9de5e014ecba42fc2df82c0dc9c26e3dc", 0xce}, {&(0x7f0000000d80)="d9bac9514b11ed4c34aab4aeb712e58a9eecdc6f6525ccb7bd9e521d39270aea5c9b5660eee2b4d98481b4b433e49aacbeb1ad7bf4d2041eb936b84d35ddf04c83b4e6e11db20cabe6e7e64afc7c57b269d56196cb2ceb55d3a7989297", 0x5d}, {&(0x7f0000001f40)="ad8aecfb7fbab4f0ffb38e1276f3799bccb5847a74e9c69425148eb65c5c673aa7b7c582eb744823f8a7536ac9b5fa41c11d7bff014b1850", 0x38}], 0x9, &(0x7f0000002040)=[@dstopts={{0x58, 0x29, 0x37, {0xe5, 0x7, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x0, 0x8, 0x20, 0x40, [0x1, 0x2, 0x4, 0x6]}}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x6c, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff8}}, @hopopts={{0x158, 0x29, 0x36, {0x88, 0x27, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x7, 0x5e, "8486ca7ef80064be8f7c4d2c92ad882366dd9fea7b044e5eabdc542d8a49020a7f614810e7984a2003a481ad63cf57d191b2649f6da308a752cf3b587e6e64bbb9983a07ae66794a93eeb754435d614ad0405c4792e8182cebfec999b8f1"}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x872, [0x7f, 0x0]}}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x0, 0x57, "04800cfddb235e8226915f148078c473fe9b2e672d12112863519393cfa8707c2b2e813450502cfe29b89b9b5204a5ad4c1b0d8d0ec207318bbac73c6fb80688033ad85aeab0271f7a5ed0b089470c29bddf601aa6c82d"}, @jumbo={0xc2, 0x4, 0xffff}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x80, 0x6, [0x7, 0x10000, 0x81de, 0x3f, 0x2000000, 0x852, 0x86]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x2c, 0x27, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x1f, 0x4, [0xccb, 0xb0e, 0x36, 0x37, 0xc879, 0x3, 0x65a6d6fb, 0x7, 0x5]}}, @generic={0x1, 0x94, "e0bf57d11397fa8d9a07d28c2c3cb3104c34566daaa85e8ccf428ebb5097335970545ed28af3affc5a5ab62717342c7f77281d119345707f8d407d53ce8a27b780dbbd69a52569b3f36169a9a3cf4bfea01e50044a77242b837d4f8f1609d3a1746fc188de21c57b6d596d72c28c69aa093876acb2bfbe19c8a860731ee6a7b4df00b3c6350b47c53d7811a01f8c62f139f26363"}, @calipso={0x7, 0x48, {0x1, 0x10, 0x81, 0x5, [0x5, 0x0, 0x888, 0x7, 0xffff, 0x800, 0x10001, 0x8]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9000}]}}}], 0x3b8}}, {{&(0x7f0000002400)={0xa, 0x4e23, 0x311c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002440)="590d6f2e6d553d1b2b094ed0e20ebd8a39bce9e214cd94a59696", 0x1a}], 0x1, &(0x7f00000024c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x2e, 0x7, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x8, [0x7]}}, @pad1, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x82}, @jumbo={0xc2, 0x4, 0xd00}, @hao={0xc9, 0x10, @local}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts_2292={{0x1020, 0x29, 0x4, {0x2e, 0x200, '\x00', [@generic={0x40, 0x1000, "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"}, @pad1]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x6c, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x80, 0xb5, "1e89fbec8e86cde19463c2a249d100a94c5f8457b37edd3ef5e1f546e716d3f1ebfa1e9d433d446e2b4e2453cc500cab70cb4d0d4b8cc139ea118c9e10c784173c3dfb95143f161bcbde8adcb416e56ef44a0dd49482e69426f53b5276929ed3a4262c76029f1168fd8d5bb389e5026d999e0852fcc5e5c6823d6fa7180b0efb7152140119cb324ccf3f5698680a1db278bee0e3db382fe957f5aaccf838ca4fbd1de315793ed463a8bd46d176b7badfabf6baecb0"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x1240}}], 0x4, 0x44081)

[  417.137664] loop4: detected capacity change from 0 to 4096
07:07:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setfsuid(r2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, <r3=>0x0})
r4 = getpgid(0xffffffffffffffff)
r5 = getegid()
setfsgid(r5)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r0, {<r6=>0xee01}}, './file0\x00'})
r7 = getegid()
setfsgid(r7)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r10, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000010c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000040)={0x18, 0x22, 0x200, 0x70bd29, 0x25dfdbff, "", [@typed={0x6, 0x41, 0x0, 0x0, @str='!\x00'}]}, 0x18}, {&(0x7f0000000600)={0x424, 0x42, 0x400, 0x70bd2d, 0x25dfdbff, "", [@nested={0x238, 0x1e, 0x0, 0x1, [@generic="cb605e6360cd48ea5ed52269b51fd8a8bef5671b18fb160774cfcbe7df75142d69f23c6a8b50da6bca35fa4de6a52de6c03be16da7bb5604a09ac5445f768176ac4f6063d3fe636aa66641de28cc3ec8a976df5963bb9473d76f3ce9b7b89ffa6937a1db145f8efaac404a7e799c13", @generic="6423f8d8a0e8c06c197fe19bffc1d3cdc26fd7204e52a904579be261711750a99492959b77f5f68a02985607fa70e81b4ac6838e2bab53ad2ad13554eac9131001e4618fd48d29520da1739517f679f82a69667bf139521013c8dda7e9bcda54041be9b1a172d0a523", @typed={0x8, 0x32, 0x0, 0x0, @fd}, @generic="212201d9b82759b37a1642e68a2e9003817f26cd28c264b7bcbd0d8fa86525787d67b66b72658b7f023eec3a0718487293e596a8a74daa8cde3b6e780a3544e1fa85862c061d374558c7b47be6a0e9228c0ba948cfe09569e49ec16d0c7f15e2aa9c12ae90ebe12608f259de95d192c7c2d86991290ebd101c480fb1ee069bef6a9c283cb45bc12f1f8850b9aeae64569b39cf4c229929aae76481fe09e90993e6a203496626b796751fa30d268be3bf93d241ffa7f1a988ad3aa4f04eacd6a75fdb15a73c0328f7be7b115dffa1ba040e2b6edfb2d80f05b078a8c676665e2d0d9026d323d2c048763317f770ba60e40a03fbc59b2390", @generic="d649c4b4c50e29e3faead3091004cdebe45e462a0bc74faeb3d6669fb9de3e3dd0210580f7c85d4a3298369f1e863e1cee0dbc541d063f3d790802879ee8ac8290040ca3", @generic="3a5eeb4332fc7b58c4c25bbfaed19243778bac86e5fbe8558c"]}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@remote}, @generic="cc6fdfe22b94fbe8d0f9a001ffb0b04f46b1e98ddec94d395d10ed33254ab201ed", @nested={0xb8, 0x19, 0x0, 0x1, [@generic="498c9b1c55", @typed={0x8, 0x9, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x3}, @generic="94f1648d9d1caab6862001bda7eed1ab8e319881127d4b5bce94155a8f78d66f42568c95d4192570cc8f690a44be160b1fbf64d2a43fedb12fb17915416bce36fe488dcc828d761c6405bcca98ee4b142c71e755d7b709d92ff80045d693885319520864de38d901b69d438dac20806bf2c87b20fb981773220f1e6d53200590e8ea254c6be23e0f9f31ff9ad72de37ebddec886d72e", @generic="0e03b83bf3"]}, @generic="bff78d2c993bc96b0c5419fd32dc66008343e43fbacc1a1b1491f0d22b1ed3596e32dc5c70000f81099b8f7fe5744ff8a9dbbb9491b99737879104e19347577ce802acd92f886b952edfedb4ad8d1e74ef1f565cd5f7e0954e86ace47b0e85ab8d9c24f2b9fa2fd866f2682acbc2e4cb205906213022e6a142b1e7a15f4ef0e0b2c48e5107b6871f5af11c6b47292f1d642eadef963cb6690d40dbbce48120bb88178a6f2a70d10175807f2e07242671710ff6297b071f788aae9d2f327fe8921f837b5b3276e0b0980df870ee4bf7686b5d2cab3baa9d8a67a47e47d215dbf93255fc51c5f4584864376e7eda3e79616b571c70b74d7d48e6"]}, 0x424}, {&(0x7f00000000c0)={0x88, 0x2a, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x67}, @generic="01d6ff57a693bcfb7426cc7e7e085e0375fdd8e61adda674d2652ff0f12ba93fc68dde235093585670edd6e515c8670baf67cfc655cc46b770da06c3a3b7bd07292e401ac596d7edd4913091cd3e181ddcee79bafbac6f20bf8ac4371eb66acf530577d58db0160dcc8618f8a52c672f555a3e"]}, 0x88}, {&(0x7f0000000b80)={0x214, 0x23, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x203, 0x45, 0x0, 0x1, [@generic="c6665c5a2b60ca01fa106ade49f047d16f296f7d3ac77ae0cb8190cdf83ba4b4e2487daf9e0637e87f3920062b033e099ab4336e6dc7670bfcefe17380767317153731ea3d96534e4c1a932fff116c308b3b91f728622f89f6a08caa0534ef5836960c34e4369954a9d593b6b17afa94ca461503eac124a31176fa0a1458cc185636418233dba06cf10c2158d77433a92d1e3710e9e1c61c108ae5820929a050211c8109e24436c7d8102bf72aa721deb748adda554d147434c8b44945924013d7d9a89cc1", @generic="a4882ab451445c6ea6486eb0e74dce5175b2c3e6fc0e848ed40b54e402e85d7f9a472fbca2468926a486e40ea27c7b5546940acc32a90c8369179209e3d60536d11e943ef79f301f07784efeb97951abb3be9ebbe60078672c6045dac464f79744f92e806335f10dc123233a932027f27096c48f319bd5407e1a33617591edd87d0ce50bef8896eba2c4d4611dbd7ee56ed096ef6176f21cc8993302e5735a98f454cd38e6afd279c0db155407fa119387ffd1", @typed={0x8, 0x1f, 0x0, 0x0, @uid=r2}, @generic="ee6acb098f96e66d9405f4cc25a735efbaa05fe0cb6fad8c8cf45f56a5c55113ec88122bcbc4846d59e9a7a58f47e5c9927ec882013ce4e9ba7b5c1e67e3e04bd8fb0e9ccfa21f23e5dd62a71ac94641dc609177c833d1db70ddb0c0b7e14b46213d8c7ee4571ec127a45d336c394a0c3fe4a61cda4b93", @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x214}, {&(0x7f0000000180)={0x1e0, 0x2b, 0x1, 0x70bd29, 0x25dfdbfe, "", [@generic="d67abe4c267d79fd2e21bfdd0e21ac6598d1cfff17118d8953f22b20d714198e229c3a1f1cb3209cb6f6d4fcc58fc96e1b6a3fc1b95404f2d82c2b8257b39e9e776faa8390878f900404dab3536943bb6309d6040dd2d6f46dd1e1646cc42f82b2b18191be18d8571bdf2d0be54ccd9f1b6a00806e85ec364b4da56a63ca04769e31db621f05e6ea02dab52ceab482b56faea4fbc930e034252a64232e03f2bf75920d0ee95743fa93700da5ea92c4ba5a59b4a00819c8a9b08d834bc2fc6bc21fd16123a5fce7cdbd4e6107cf6afa949552439687d80087937e3ae18f07ad99f9828568e1e63c", @generic="722cdda3f11da20b4c30d2640d907b00043bab11eeda6ea834b3e30832543b80fca4ecc89dd0f62108b7271ab9bcb4f5d9ddfb999f408fb10944cdba6f810ec004853a6cdb801711f551efedff9a9ba9eea814b3363889220b97d851257c8614e788060addd46b7693350d313f9deba7ec6433d8687d976aa06266941a893f6c010b7c33583879c5f75a5bb389808c2c989b0ae60093fdf9cba475deedde79979a2f91490d0f164350c3e8941966fe2db688a844dc436aee918db96c1867766c3271e5c2453c7785564085d7c10f032306f3127f97b8868001e990c2b9278a7cfc30d74ef1ca19c496"]}, 0x1e0}], 0x5, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r8, r9]}}, @rights={{0x18, 0x1, 0x1, [r10, r0]}}], 0x90, 0x40000d0}, 0x24040001)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000005c0)={0x28, 0x26, 0x111, 0x0, 0x0, "", [@generic="bfbbe3d8d40f362658df1d13b23dbee05d52a06782"]}, 0x28}, {&(0x7f0000000b40)={0x10}, 0x10}], 0x2}, 0x0)

[  417.195210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6431 comm=syz-executor.5
[  417.201695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:07:32 executing program 7:
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+10000}, {0x0, 0x2710}})
setfsuid(r0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000440)="200000008000000006000000660000000f000000000000000100000001000000004000000040000120000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002314eae57fe83abd87bf181dfbc9c48020973fe5c480b5e036e9ae2b47b21dac5e94cde8616fcabc98f639b4ef14584152f1398db245f4fb7cbfdd2c375422cada13f92cf6563ee91be3f4933c02dc8ce197c39893a32266c8c7c495ff767f994fc120ec1d8dc37a1757be5bf929a13a3b5c8e1a684d4791af794", 0xd4, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x8}, {&(0x7f0000000140)="ed41000000000043000000075fd3f4655fd3f4655f000000000000040004f57012756646bfa0d628214579327c8c97c7585f5076d435d26779b8c801d2036a5a251c7108391bcbca330f5d038f6c00e1dc1bf51647178a5061340c485305d1376a0d53d493761a19c1", 0x69, 0x2200}, {0x0, 0x0, 0x209005}], 0x0, &(0x7f0000000280)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\n\x1e\xf4\x0e\xe7X\x06\xdc)\xb5\xbb\xa5\x1a\x81\xe1\x17g\x97\xc4\x1d\xfc\x9bG\xb0:I\xc8N+EiWb2\x0fi\x88\x8fv \x1f\'\xe5G\xc2\xd7\xe12\x90=\xb8%\xfe\x92\xb6\x15s\xc6L\xbc|\xff\x1b\x85\xa7\xfd5\x96\xf0\xb2\x9e\x99n^\xa3\xad\f\xf3\xa6\x9e\xbe\x1a\x18\xefx\x15\xc1Alk\xc45\xa3q_6!R\xcfFV\x8a\xf3\xa8\x8du\xfa\xc6\xcdl\x9a\xb4\xf6\xd9\x8a\xa6CYO\xf4\x1e\xefc#&P\xb7I\xfe\x8d\x88\x1d9i\'\xeb\'>W\xe5\xa3\xf0FE\xf4\xff\xc05\x00w\bn\xf0\"\x92Y\xa5m\xd3K\xbcQ_\x11&\x10\x0et8\xa9\xbb\xae?\xc2\xfd\xbd\a\xe2\x81\xcd\xe8\xb6=\xa2A\x9b\xc0\xde'}}, {@obj_type={'obj_type', 0x3d, 'ext2\x00'}}, {@euid_lt={'euid<', 0xee01}}, {@obj_user}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_gt={'uid>', r0}}, {@obj_user={'obj_user', 0x3d, 'smackfsfloor'}}, {@smackfshat={'smackfshat', 0x3d, 'ext2\x00'}}]})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540))

[  417.238694] 9pnet: Could not find request transport: f�
[  417.253650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.256690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6431 comm=syz-executor.5
[  417.257928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:07:32 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:32 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:07:32 executing program 6:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x288341, 0x0)
fadvise64(r0, 0x4, 0x3f, 0x2)
fadvise64(r1, 0x1, 0x7, 0x3)
readahead(r0, 0x0, 0x0)

[  417.325623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:07:32 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

[  417.364981] loop7: detected capacity change from 0 to 8336
[  417.371816] ext2: Unknown parameter 'smackfsfloor'
07:07:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setfsuid(r2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, <r3=>0x0})
r4 = getpgid(0xffffffffffffffff)
r5 = getegid()
setfsgid(r5)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r0, {<r6=>0xee01}}, './file0\x00'})
r7 = getegid()
setfsgid(r7)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r10, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000010c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000040)={0x18, 0x22, 0x200, 0x70bd29, 0x25dfdbff, "", [@typed={0x6, 0x41, 0x0, 0x0, @str='!\x00'}]}, 0x18}, {&(0x7f0000000600)={0x424, 0x42, 0x400, 0x70bd2d, 0x25dfdbff, "", [@nested={0x238, 0x1e, 0x0, 0x1, [@generic="cb605e6360cd48ea5ed52269b51fd8a8bef5671b18fb160774cfcbe7df75142d69f23c6a8b50da6bca35fa4de6a52de6c03be16da7bb5604a09ac5445f768176ac4f6063d3fe636aa66641de28cc3ec8a976df5963bb9473d76f3ce9b7b89ffa6937a1db145f8efaac404a7e799c13", @generic="6423f8d8a0e8c06c197fe19bffc1d3cdc26fd7204e52a904579be261711750a99492959b77f5f68a02985607fa70e81b4ac6838e2bab53ad2ad13554eac9131001e4618fd48d29520da1739517f679f82a69667bf139521013c8dda7e9bcda54041be9b1a172d0a523", @typed={0x8, 0x32, 0x0, 0x0, @fd}, @generic="212201d9b82759b37a1642e68a2e9003817f26cd28c264b7bcbd0d8fa86525787d67b66b72658b7f023eec3a0718487293e596a8a74daa8cde3b6e780a3544e1fa85862c061d374558c7b47be6a0e9228c0ba948cfe09569e49ec16d0c7f15e2aa9c12ae90ebe12608f259de95d192c7c2d86991290ebd101c480fb1ee069bef6a9c283cb45bc12f1f8850b9aeae64569b39cf4c229929aae76481fe09e90993e6a203496626b796751fa30d268be3bf93d241ffa7f1a988ad3aa4f04eacd6a75fdb15a73c0328f7be7b115dffa1ba040e2b6edfb2d80f05b078a8c676665e2d0d9026d323d2c048763317f770ba60e40a03fbc59b2390", @generic="d649c4b4c50e29e3faead3091004cdebe45e462a0bc74faeb3d6669fb9de3e3dd0210580f7c85d4a3298369f1e863e1cee0dbc541d063f3d790802879ee8ac8290040ca3", @generic="3a5eeb4332fc7b58c4c25bbfaed19243778bac86e5fbe8558c"]}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@remote}, @generic="cc6fdfe22b94fbe8d0f9a001ffb0b04f46b1e98ddec94d395d10ed33254ab201ed", @nested={0xb8, 0x19, 0x0, 0x1, [@generic="498c9b1c55", @typed={0x8, 0x9, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x3}, @generic="94f1648d9d1caab6862001bda7eed1ab8e319881127d4b5bce94155a8f78d66f42568c95d4192570cc8f690a44be160b1fbf64d2a43fedb12fb17915416bce36fe488dcc828d761c6405bcca98ee4b142c71e755d7b709d92ff80045d693885319520864de38d901b69d438dac20806bf2c87b20fb981773220f1e6d53200590e8ea254c6be23e0f9f31ff9ad72de37ebddec886d72e", @generic="0e03b83bf3"]}, @generic="bff78d2c993bc96b0c5419fd32dc66008343e43fbacc1a1b1491f0d22b1ed3596e32dc5c70000f81099b8f7fe5744ff8a9dbbb9491b99737879104e19347577ce802acd92f886b952edfedb4ad8d1e74ef1f565cd5f7e0954e86ace47b0e85ab8d9c24f2b9fa2fd866f2682acbc2e4cb205906213022e6a142b1e7a15f4ef0e0b2c48e5107b6871f5af11c6b47292f1d642eadef963cb6690d40dbbce48120bb88178a6f2a70d10175807f2e07242671710ff6297b071f788aae9d2f327fe8921f837b5b3276e0b0980df870ee4bf7686b5d2cab3baa9d8a67a47e47d215dbf93255fc51c5f4584864376e7eda3e79616b571c70b74d7d48e6"]}, 0x424}, {&(0x7f00000000c0)={0x88, 0x2a, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x67}, @generic="01d6ff57a693bcfb7426cc7e7e085e0375fdd8e61adda674d2652ff0f12ba93fc68dde235093585670edd6e515c8670baf67cfc655cc46b770da06c3a3b7bd07292e401ac596d7edd4913091cd3e181ddcee79bafbac6f20bf8ac4371eb66acf530577d58db0160dcc8618f8a52c672f555a3e"]}, 0x88}, {&(0x7f0000000b80)={0x214, 0x23, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x203, 0x45, 0x0, 0x1, [@generic="c6665c5a2b60ca01fa106ade49f047d16f296f7d3ac77ae0cb8190cdf83ba4b4e2487daf9e0637e87f3920062b033e099ab4336e6dc7670bfcefe17380767317153731ea3d96534e4c1a932fff116c308b3b91f728622f89f6a08caa0534ef5836960c34e4369954a9d593b6b17afa94ca461503eac124a31176fa0a1458cc185636418233dba06cf10c2158d77433a92d1e3710e9e1c61c108ae5820929a050211c8109e24436c7d8102bf72aa721deb748adda554d147434c8b44945924013d7d9a89cc1", @generic="a4882ab451445c6ea6486eb0e74dce5175b2c3e6fc0e848ed40b54e402e85d7f9a472fbca2468926a486e40ea27c7b5546940acc32a90c8369179209e3d60536d11e943ef79f301f07784efeb97951abb3be9ebbe60078672c6045dac464f79744f92e806335f10dc123233a932027f27096c48f319bd5407e1a33617591edd87d0ce50bef8896eba2c4d4611dbd7ee56ed096ef6176f21cc8993302e5735a98f454cd38e6afd279c0db155407fa119387ffd1", @typed={0x8, 0x1f, 0x0, 0x0, @uid=r2}, @generic="ee6acb098f96e66d9405f4cc25a735efbaa05fe0cb6fad8c8cf45f56a5c55113ec88122bcbc4846d59e9a7a58f47e5c9927ec882013ce4e9ba7b5c1e67e3e04bd8fb0e9ccfa21f23e5dd62a71ac94641dc609177c833d1db70ddb0c0b7e14b46213d8c7ee4571ec127a45d336c394a0c3fe4a61cda4b93", @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x214}, {&(0x7f0000000180)={0x1e0, 0x2b, 0x1, 0x70bd29, 0x25dfdbfe, "", [@generic="d67abe4c267d79fd2e21bfdd0e21ac6598d1cfff17118d8953f22b20d714198e229c3a1f1cb3209cb6f6d4fcc58fc96e1b6a3fc1b95404f2d82c2b8257b39e9e776faa8390878f900404dab3536943bb6309d6040dd2d6f46dd1e1646cc42f82b2b18191be18d8571bdf2d0be54ccd9f1b6a00806e85ec364b4da56a63ca04769e31db621f05e6ea02dab52ceab482b56faea4fbc930e034252a64232e03f2bf75920d0ee95743fa93700da5ea92c4ba5a59b4a00819c8a9b08d834bc2fc6bc21fd16123a5fce7cdbd4e6107cf6afa949552439687d80087937e3ae18f07ad99f9828568e1e63c", @generic="722cdda3f11da20b4c30d2640d907b00043bab11eeda6ea834b3e30832543b80fca4ecc89dd0f62108b7271ab9bcb4f5d9ddfb999f408fb10944cdba6f810ec004853a6cdb801711f551efedff9a9ba9eea814b3363889220b97d851257c8614e788060addd46b7693350d313f9deba7ec6433d8687d976aa06266941a893f6c010b7c33583879c5f75a5bb389808c2c989b0ae60093fdf9cba475deedde79979a2f91490d0f164350c3e8941966fe2db688a844dc436aee918db96c1867766c3271e5c2453c7785564085d7c10f032306f3127f97b8868001e990c2b9278a7cfc30d74ef1ca19c496"]}, 0x1e0}], 0x5, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r8, r9]}}, @rights={{0x18, 0x1, 0x1, [r10, r0]}}], 0x90, 0x40000d0}, 0x24040001)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000005c0)={0x28, 0x26, 0x111, 0x0, 0x0, "", [@generic="bfbbe3d8d40f362658df1d13b23dbee05d52a06782"]}, 0x28}, {&(0x7f0000000b40)={0x10}, 0x10}], 0x2}, 0x0)

[  417.398738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
07:07:32 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, &(0x7f0000000040)=ANY=[@ANYBLOB="07b64c83e83ed27c89a8671f5c2bc5d11264b9af82be56f9a5d71471f26ce49e31540f6c3795ae8c9a3de1e6d1ae299ebd1e5005cff29b25206036ed2f184ad4d4148516b7bcfc20a8ee5a9b44a6ccfabb009319f90f"])
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x43fc26d9, 0x2})

[  417.438576] 9pnet: Could not find request transport: f�
07:07:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1)

[  417.504834] FAULT_INJECTION: forcing a failure.
[  417.504834] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  417.505814] CPU: 1 UID: 0 PID: 6464 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  417.505830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  417.505837] Call Trace:
[  417.505842]  <TASK>
[  417.505846]  dump_stack_lvl+0xfa/0x120
[  417.505882]  should_fail_ex+0x4d7/0x5e0
[  417.505899]  _copy_from_user+0x30/0xd0
[  417.505916]  copy_msghdr_from_user+0x88/0x150
[  417.505938]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  417.505960]  ? __pfx_perf_trace_lock+0x10/0x10
[  417.505977]  ? lock_acquire+0x15e/0x2f0
[  417.505992]  ___sys_sendmsg+0xdc/0x1b0
[  417.506013]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.506031]  ? perf_trace_lock+0xb5/0x5d0
[  417.506046]  ? __pfx_perf_trace_lock+0x10/0x10
[  417.506062]  ? proc_fail_nth_write+0x98/0x250
[  417.506084]  ? lock_acquire+0x15e/0x2f0
[  417.506095]  ? __fget_files+0x34/0x3b0
[  417.506113]  ? find_held_lock+0x2b/0x80
[  417.506129]  ? __fget_files+0x203/0x3b0
[  417.506146]  ? lock_release+0xc8/0x290
[  417.506160]  ? __fget_files+0x20d/0x3b0
[  417.506183]  __sys_sendmsg+0x150/0x200
[  417.506194]  ? __pfx___sys_sendmsg+0x10/0x10
[  417.506206]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  417.506226]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  417.506245]  ? ksys_write+0x1a3/0x240
[  417.506263]  ? __pfx_ksys_write+0x10/0x10
[  417.506286]  do_syscall_64+0xbf/0x360
[  417.506303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.506318] RIP: 0033:0x7f752e428b19
[  417.506328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  417.506341] RSP: 002b:00007f752b99e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.506353] RAX: ffffffffffffffda RBX: 00007f752e53bf60 RCX: 00007f752e428b19
[  417.506361] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  417.506368] RBP: 00007f752b99e1d0 R08: 0000000000000000 R09: 0000000000000000
[  417.506375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.506382] R13: 00007fffe575e06f R14: 00007f752b99e300 R15: 0000000000022000
[  417.506399]  </TASK>
[  417.507965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6460 comm=syz-executor.5
[  417.545456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  425.320038] Bluetooth: hci0: command 0x0406 tx timeout
07:07:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:07:41 executing program 6:
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a030110bb55913ff08868d2a5045e2d4c5063a74d63742626badc401508845c36c30c3663b233dfee39235cd5298625eb1c748ff297948ae117ed9f6764a9f5c0ca81481b8e154b0b58e47ad7310b16b583499b2bdcb7c45c5b3a1767d5be1ba909296c6ebaa7ff5d5783ed15b4b3dcfbac345fa44d161b84f03f3baf73fcf748a2d3a566279322dd13f3a8b9fd11a75c610b93ceb3ca37cea57faf5ae3b0e96382936d6743c7de276431c74c394fbe5307dc7097f1fe05cbde26"], 0xd)
syz_emit_vhci(0x0, 0x0)

07:07:41 executing program 7:
syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000004000000000000e175f9c31875dc81277465abc6541b2310000600000000002000000000000000"], 0x24, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x400)
setresuid(0x0, r0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')

07:07:41 executing program 4:
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#-*'}, {0x20, '%^]%,\\\\}^-%'}, {0x20, '-\'\x99#'}, {}, {}], 0xa, "37989634ac0682d34b5448f7e72a48a65c349fcc44c7a2633ca24b285950e70b341e0fd7a490a2c716ac65ad164a103b444cb2b6383442281a"}, 0x5b)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000000)={0x13})

07:07:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2)

07:07:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:41 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012a00))

07:07:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

07:07:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  426.530717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.552782] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted
[  426.555382] 9pnet: Could not find request transport: f�
07:07:41 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x868a89900, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="cfbb8d62cf67e601ba2321e9b67bcf85f8c0a95ee269e38251e39a452d525afd38311bc8dbe9621fc1cf23e1005680426754e8b6d70d28f91456d039b7db89e759ef62b130e8639c97a80e848e0fe944e7ba56622135493c467eccde3075a071f7e1974ba2404058267fd61ff6beca713b176da73094ed3904caf977083e7262518e873cc0aed0290e07ec749391c61c954c62eaa68355b8a2475ebda3aff51e9df7bc686488f8e3d3fc6f823d4497314fe20b6e4e966f25913f6846a6e7", 0xbe, 0x4}], 0x8000, &(0x7f0000000200)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x13, 0x65, 0x30, 0x30]}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@measure}, {@audit}, {@context={'context', 0x3d, 'user_u'}}]})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, r2, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000001000"/32])

[  426.614426] FAULT_INJECTION: forcing a failure.
[  426.614426] name failslab, interval 1, probability 0, space 0, times 1
[  426.615545] loop5: detected capacity change from 0 to 1024
[  426.616106] CPU: 0 UID: 0 PID: 6489 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  426.616136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  426.616148] Call Trace:
[  426.616156]  <TASK>
[  426.616164]  dump_stack_lvl+0xfa/0x120
[  426.616198]  should_fail_ex+0x4d7/0x5e0
[  426.616226]  should_failslab+0xc2/0x120
[  426.616248]  kmem_cache_alloc_node_noprof+0x71/0x470
[  426.616281]  ? __alloc_skb+0x2ab/0x370
[  426.616323]  __alloc_skb+0x2ab/0x370
[  426.616357]  ? __pfx___alloc_skb+0x10/0x10
[  426.616395]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  426.616438]  netlink_alloc_large_skb+0x69/0x150
[  426.616477]  netlink_sendmsg+0x676/0xd80
[  426.616519]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.616570]  ____sys_sendmsg+0xa67/0xc20
[  426.616601]  ? __pfx_____sys_sendmsg+0x10/0x10
[  426.616645]  ___sys_sendmsg+0x10f/0x1b0
[  426.616683]  ? __pfx____sys_sendmsg+0x10/0x10
[  426.616716]  ? perf_trace_lock+0xb5/0x5d0
[  426.616747]  ? __pfx_perf_trace_lock+0x10/0x10
[  426.616770]  ? proc_fail_nth_write+0x98/0x250
[  426.616808]  ? lock_acquire+0x15e/0x2f0
[  426.616830]  ? __fget_files+0x34/0x3b0
[  426.616862]  ? find_held_lock+0x2b/0x80
[  426.616892]  ? __fget_files+0x203/0x3b0
[  426.616923]  ? lock_release+0xc8/0x290
[  426.616950]  ? __fget_files+0x20d/0x3b0
[  426.616992]  __sys_sendmsg+0x150/0x200
[  426.617011]  ? __pfx___sys_sendmsg+0x10/0x10
[  426.617042]  ? __pfx_ksys_write+0x10/0x10
[  426.617094]  do_syscall_64+0xbf/0x360
[  426.617124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.617146] RIP: 0033:0x7f752e428b19
[  426.617163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  426.617183] RSP: 002b:00007f752b99e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.617204] RAX: ffffffffffffffda RBX: 00007f752e53bf60 RCX: 00007f752e428b19
[  426.617218] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  426.617231] RBP: 00007f752b99e1d0 R08: 0000000000000000 R09: 0000000000000000
[  426.617244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.617256] R13: 00007fffe575e06f R14: 00007f752b99e300 R15: 0000000000022000
[  426.617287]  </TASK>
07:07:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3)

[  426.669338] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted
07:07:41 executing program 7:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x792, 0x9, 0x0, 'queue1\x00', 0x6})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x0, 0x2, {0xffffffffffffffff, 0x3, 0x0, 0x2, 0xfffffff8}, 0x8001})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x7, 0x1, {0x3, 0x0, 0x8, 0x2, 0x7f}, 0x20})
fsetxattr(r0, &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0)

07:07:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno='])

[  426.716148] EXT4-fs warning (device loop5): read_mmp_block:114: Error -117 while reading MMP block 0
[  426.724497] loop6: detected capacity change from 0 to 264192
[  426.725472] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  426.782048] loop6: detected capacity change from 0 to 264192
07:07:41 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000000040)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000012a00)="ed4100003c000000e2f4655fe2f4655fe2f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000048c5e5fc00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea0407000000000000000000000000000064617461", 0xb8, 0x5600}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x8000}, {0x0, 0x0, 0x8000000000a000}], 0x0, &(0x7f0000000140))
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, <r2=>0xee00}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x3002400, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@loose}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@cache_mmap}, {@access_any}], [{@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}})

[  426.789573] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
07:07:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4)

[  426.859867] loop4: detected capacity change from 0 to 264192
[  426.870863] 9pnet: Could not find request transport: f�
[  426.913235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.046747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
07:07:52 executing program 6:
r0 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x7f, 0x7ff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="070000000000776ffd79be2438b291afc504592900002e2f66696c65"])
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/249, 0xf9}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c0000005d0bbd120100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000f0865cf8393e1800015319e46def9f8fc3b3f6ed9476d2793b2eb18dfff8cb853f1377ae847a0db627a57e101164d72096debb01e70c45a59f00d02d9014dd4254890be8da7ccb9827cabf1b5573b55486aae1f8571358c72420e5d883e0258a71ec3d5de359fc1d100c97038b2cc7bb9342f2a9ad0347224986bd3c3024eac7bc83ac5b4c6990282d49e8d9a0615e8f63e185644260b6dd49bd8fa9522a158929cd903a9fe11a437a93de21577ae595d6aea64cec4bbda72d710ea03c783428e34df399366478308ba1efa3a68b258fda4fcbe8edaf31e442166059553af159", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xc8}, 0x41)

07:07:52 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
setresuid(0x0, 0xee01, r1)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x894c, 0x0)

07:07:52 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:07:52 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000640)='limits\x00')
pread64(r1, &(0x7f00000000c0)=""/194, 0xc2, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000000))
dup2(0xffffffffffffffff, r0)

07:07:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5)

07:07:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX])

07:07:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:07:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
fork()
r3 = fork()
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0xfffffffffffffebf, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0, {r0}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7ff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20004015)
sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0)

07:07:52 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  437.535693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.568297] 9pnet: Could not find request transport: f�
07:07:52 executing program 7:
io_setup(0x7fff, &(0x7f0000000040)=<r0=>0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x2, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
r3 = accept4(r1, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80, 0x80000)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x100)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001700)={{0x1, 0x1, 0x18, <r7=>r1, {0xda6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r8=>r1, @out_args}, './file0\x00'})
r9 = dup(r1)
io_submit(r2, 0xa, &(0x7f0000001980)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f0000000080)="f6d91a2c7eaacd2eee1845098908283e0f6e98a09bbdc9c8f52676f186b59013c03b76664096afe4e312711db40521ca6b209d850fdcf5fe6e78d3d73386b0f5a07b0dc3f7ba4183cbe5b4219ca2feed4f07f00409986e1dc93265472929bab425abf2a69feea75be2d590ef0489e87468c28139686250bd851eaf521f231c6f5fd0a8a35bd7452520679e5d9394b3d486f22e", 0x93, 0xfffffffffffffe00, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0x81, r3, &(0x7f0000000200)="ccb62fae288d564962ae4d98179af12eef13aea55e36d27258b5dc042a35ad49fe287b40221dc802b204599636b85c8aeac29c681f602f4df6a459d6b1de0050465c2c10b3720489e0c15dc99598229bb3d30f3fdb39a16c2d4dcb83dd1a23e016a05a5dc546778802324f7de438", 0x6e, 0x100000001, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x59, r1, &(0x7f00000002c0)="f19ac677a0c2d81748e10a502351d0bc1224", 0x12, 0xffffffffffffffe1, 0x0, 0x1, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7000, r5, &(0x7f0000000480)="c96e358dd8a2f9427c942fd3886a4463dc3df9ae3bba8446d27546b1f54323da68821355da151c8afff43fcc95fd82f5c1620d577413bad93cb28fb0c2a5a507a26e91124857fb8d532d3eef04ed7ee822e2f958fe15bc446f75298fe66cd480ff68d32d1acc9a829f6d10f8f83031c20143c2a37c09a1f0da7c6d51a1487e6b9916f473bcc22692c2f3ce3c4d106d1705419df498c0afb070e5d7c498e8129994a435b9d72b1861121ae5691aeaaddb7b96149c01504dd21aef526859b655193187230f413b019959aded97835115ff81e490cdeedca445fdf8fd5a73c9b73252238547fc3810688457ca7738173c4729287be43c5448e58275efced93e", 0xfe, 0x9, 0x0, 0x0, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xda5968734f37487a, 0x8, r1, &(0x7f00000003c0)="15ec4c88b5824b4ead4cfe1115f53ea9dd8e7cb107d0bbe32790ba76da2f4c2ea46035a4b955dcaa2a883c", 0x2b, 0x7, 0x0, 0x5, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x3ff, r1, &(0x7f0000000580)="d6d4cafc1d1b99455a42b3adb652de01f0b81ce2c94a164e52ee291d4341704c2ad556fe2c3c56d8c16b2120a75ba95456dbd6882b40c5ef42e2a43f2519dc67ce70bdf98205e44596e5f35d6cc8493a3bba616e95533fa5c3bdb8da539cc544f673baa3db6e28cb6d9bdb3d6a77474507d8caaeea5520fa46a3eda47e944413c6386e4aaa3d4c3fe20597f29d1ca0d0c182a2481cd8a6823bf0063cac7ba4810393e96713a3b0b10be6f9e1b067", 0xae, 0x4, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x1000, r1, &(0x7f0000000680)="09b252c9172e11fe9d8c35ebc8b124c6e17159c38e105f1cd608711435", 0x1d, 0xffffffff80000001}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000700)="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", 0x1000, 0x3, 0x0, 0xbcee452851b713b4, r7}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x5, 0x9, r8, &(0x7f00000017c0)="452aba6094aef34d5fd44d942c6b192efcb4137dfb20d15a178627717b8f78e0448aff4ab9ce32ef623be02d6d11926e617121b27fd28de90e74d6b503db41faec072c4c0adf707d9b6bed5a87bd4d1abb493897480869b714fd8e4c3167b4fe18243b95265f86ce5a34da735d05de3abbd96e3852493c164a5ca136253589a7d43c6bee33c0103e29b9c0e1aa1a3e3bf4fa6fba364c6fa1a56ee643a9290e8b1979b73c8c6ce2700a2e24c5051c59ba89ed5e217991cd7badd4", 0xba, 0xfff, 0x0, 0x1}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x8, 0x4e, r9, &(0x7f00000018c0)="a0a7ede2436bf3b0cf66c59db90ce82ee5d59c217a27a92a783cce2bdeb458c52710fd402c427eb07778b943a50361135998730cb7d25cd7b56ad5f290333db56b745f314a69", 0x46, 0x2}])
r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000001b80)='r', 0x1, 0x2}])

07:07:52 executing program 6:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cryptomgr', 0x0, 0x41)

07:07:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6)

07:07:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:07:52 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000001300)={0x0, <r1=>0x0})
process_vm_readv(r1, 0x0, 0x4, 0x0, 0x0, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x29, 0x2b, 0x2, 0x5, 0x38, @local, @loopback, 0x7, 0x18, 0x0, 0xfffffff9}})
clone3(&(0x7f0000001140)={0x40000700, 0x0, &(0x7f0000000080), 0x0, {}, &(0x7f00000000c0)=""/4095, 0xfff, 0x0, 0x0}, 0x58)

07:07:52 executing program 6:
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pread64(r0, &(0x7f0000000040)=""/48, 0x30, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368657461673d72661dfb2c7365636c6162656c2c00"])

07:07:52 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  437.743928] FAULT_INJECTION: forcing a failure.
[  437.743928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.745953] CPU: 0 UID: 0 PID: 6565 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  437.745986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  437.746000] Call Trace:
[  437.746008]  <TASK>
[  437.746017]  dump_stack_lvl+0xfa/0x120
[  437.746053]  should_fail_ex+0x4d7/0x5e0
[  437.746091]  _copy_from_iter+0x1dc/0x15b0
[  437.746125]  ? lock_acquire+0x15e/0x2f0
[  437.746152]  ? __virt_addr_valid+0x1c6/0x5d0
[  437.746191]  ? find_held_lock+0x2b/0x80
[  437.746229]  ? __pfx__copy_from_iter+0x10/0x10
[  437.746258]  ? lock_release+0xc8/0x290
[  437.746289]  ? __virt_addr_valid+0x100/0x5d0
[  437.746329]  ? __check_object_size+0x57b/0x880
[  437.746369]  netlink_sendmsg+0x809/0xd80
[  437.746419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.746477]  ____sys_sendmsg+0xa67/0xc20
[  437.746509]  ? copy_msghdr_from_user+0xfb/0x150
[  437.746551]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.746594]  ? lock_acquire+0x15e/0x2f0
[  437.746624]  ___sys_sendmsg+0x10f/0x1b0
[  437.746667]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.746706]  ? perf_trace_lock+0xb5/0x5d0
[  437.746739]  ? __pfx_perf_trace_lock+0x10/0x10
[  437.746777]  ? proc_fail_nth_write+0x98/0x250
[  437.746821]  ? lock_acquire+0x15e/0x2f0
[  437.746846]  ? __fget_files+0x34/0x3b0
[  437.746882]  ? find_held_lock+0x2b/0x80
[  437.746917]  ? __fget_files+0x203/0x3b0
[  437.746953]  ? lock_release+0xc8/0x290
[  437.746984]  ? __fget_files+0x20d/0x3b0
[  437.747031]  __sys_sendmsg+0x150/0x200
[  437.747053]  ? __pfx___sys_sendmsg+0x10/0x10
[  437.747087]  ? __pfx_ksys_write+0x10/0x10
[  437.747138]  do_syscall_64+0xbf/0x360
[  437.747172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.747197] RIP: 0033:0x7f752e428b19
[  437.747215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  437.747239] RSP: 002b:00007f752b99e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.747262] RAX: ffffffffffffffda RBX: 00007f752e53bf60 RCX: 00007f752e428b19
[  437.747278] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  437.747293] RBP: 00007f752b99e1d0 R08: 0000000000000000 R09: 0000000000000000
[  437.747308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.747322] R13: 00007fffe575e06f R14: 00007f752b99e300 R15: 0000000000022000
[  437.747357]  </TASK>
[  437.756265] 9pnet: Could not find request transport: f�
07:07:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7)

[  437.939189] FAULT_INJECTION: forcing a failure.
[  437.939189] name failslab, interval 1, probability 0, space 0, times 0
[  437.940993] CPU: 0 UID: 0 PID: 6577 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  437.941027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  437.941041] Call Trace:
[  437.941049]  <TASK>
[  437.941065]  dump_stack_lvl+0xfa/0x120
[  437.941103]  should_fail_ex+0x4d7/0x5e0
[  437.941133]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[  437.941165]  should_failslab+0xc2/0x120
[  437.941189]  __kmalloc_noprof+0xb4/0x4b0
[  437.941235]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[  437.941273]  genl_family_rcv_msg_doit+0xab/0x2f0
[  437.941302]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  437.941337]  ? cap_capable+0xdb/0x3b0
[  437.941381]  ? security_capable+0x2f/0x90
[  437.941420]  ? ns_capable+0xe2/0x120
[  437.941458]  genl_rcv_msg+0x532/0x7e0
[  437.941491]  ? __pfx_genl_rcv_msg+0x10/0x10
[  437.941518]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  437.941544]  ? __pfx_nl80211_start_ap+0x10/0x10
[  437.941571]  ? __pfx_nl80211_post_doit+0x10/0x10
[  437.941621]  netlink_rcv_skb+0x147/0x430
[  437.941665]  ? __pfx_genl_rcv_msg+0x10/0x10
[  437.941695]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.941754]  ? netlink_deliver_tap+0x1ae/0xce0
[  437.941793]  ? is_vmalloc_addr+0x86/0xa0
[  437.941835]  genl_rcv+0x28/0x40
[  437.941860]  netlink_unicast+0x53d/0x7f0
[  437.941907]  ? __pfx_netlink_unicast+0x10/0x10
[  437.941961]  netlink_sendmsg+0x8ac/0xd80
[  437.942010]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.942068]  ____sys_sendmsg+0xa67/0xc20
[  437.942102]  ? copy_msghdr_from_user+0xfb/0x150
[  437.942144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.942195]  ___sys_sendmsg+0x10f/0x1b0
[  437.942238]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.942278]  ? perf_trace_lock+0xb5/0x5d0
[  437.942312]  ? __pfx_perf_trace_lock+0x10/0x10
[  437.942351]  ? find_held_lock+0x2b/0x80
[  437.942388]  ? __fget_files+0x203/0x3b0
[  437.942425]  ? lock_release+0xc8/0x290
[  437.942458]  ? __fget_files+0x20d/0x3b0
[  437.942506]  __sys_sendmsg+0x150/0x200
[  437.942529]  ? __pfx___sys_sendmsg+0x10/0x10
[  437.942564]  ? __pfx_ksys_write+0x10/0x10
[  437.942615]  do_syscall_64+0xbf/0x360
[  437.942651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.942676] RIP: 0033:0x7f752e428b19
[  437.942695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  437.942718] RSP: 002b:00007f752b99e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.942742] RAX: ffffffffffffffda RBX: 00007f752e53bf60 RCX: 00007f752e428b19
[  437.942771] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  437.942786] RBP: 00007f752b99e1d0 R08: 0000000000000000 R09: 0000000000000000
[  437.942800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.942815] R13: 00007fffe575e06f R14: 00007f752b99e300 R15: 0000000000022000
[  437.942851]  </TASK>
07:08:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8)

07:08:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:08:01 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:08:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000800002007e000e8b8213cb483a72000008000300e32090645894d8aed8519a57c5d34dd32b43848e00e8e075eeb5d799c5b92138c1133828502d85342407a7", @ANYRES32=0x0, @ANYBLOB="b3ed1b25f487329ca5e767082011c38c0046fcf94b694049ce045780cff99fce83800eca02e7f7e21a31320c871a460f652922470030df2e91b976a441a045e8b36e64db166f1eb8b3037a4dadc6eed2d462ff9b34d1e742dc76eb1277"], 0x1c}}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000884}, 0x40000c0)

07:08:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:08:01 executing program 7:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd39}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0)

07:08:01 executing program 4:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000000c0)="d197ccd7", 0x4)

07:08:01 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

[  446.962682] FAULT_INJECTION: forcing a failure.
[  446.962682] name failslab, interval 1, probability 0, space 0, times 0
[  446.963702] CPU: 0 UID: 0 PID: 6592 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  446.963718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  446.963725] Call Trace:
[  446.963730]  <TASK>
[  446.963735]  dump_stack_lvl+0xfa/0x120
[  446.963758]  should_fail_ex+0x4d7/0x5e0
[  446.963774]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[  446.963792]  should_failslab+0xc2/0x120
[  446.963804]  __kmalloc_noprof+0xb4/0x4b0
[  446.963828]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[  446.963847]  genl_family_rcv_msg_doit+0xab/0x2f0
[  446.963860]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  446.963877]  ? cap_capable+0xdb/0x3b0
[  446.963900]  ? security_capable+0x2f/0x90
[  446.963918]  ? ns_capable+0xe2/0x120
[  446.963937]  genl_rcv_msg+0x532/0x7e0
[  446.963953]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.963966]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  446.963981]  ? __pfx_nl80211_start_ap+0x10/0x10
[  446.963994]  ? __pfx_nl80211_post_doit+0x10/0x10
[  446.964018]  netlink_rcv_skb+0x147/0x430
[  446.964038]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.964052]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.964084]  ? netlink_deliver_tap+0x1ae/0xce0
[  446.964102]  ? is_vmalloc_addr+0x86/0xa0
[  446.964122]  genl_rcv+0x28/0x40
[  446.964133]  netlink_unicast+0x53d/0x7f0
[  446.964155]  ? __pfx_netlink_unicast+0x10/0x10
[  446.964180]  netlink_sendmsg+0x8ac/0xd80
[  446.964203]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.964230]  ____sys_sendmsg+0xa67/0xc20
[  446.964247]  ? copy_msghdr_from_user+0xfb/0x150
[  446.964267]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.964287]  ? lock_acquire+0x15e/0x2f0
[  446.964303]  ___sys_sendmsg+0x10f/0x1b0
[  446.964323]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.964341]  ? perf_trace_lock+0xb5/0x5d0
[  446.964358]  ? __pfx_perf_trace_lock+0x10/0x10
[  446.964371]  ? proc_fail_nth_write+0x98/0x250
[  446.964393]  ? lock_acquire+0x15e/0x2f0
[  446.964405]  ? __fget_files+0x34/0x3b0
[  446.964426]  ? find_held_lock+0x2b/0x80
[  446.964443]  ? __fget_files+0x203/0x3b0
[  446.964459]  ? lock_release+0xc8/0x290
[  446.964474]  ? __fget_files+0x20d/0x3b0
[  446.964497]  __sys_sendmsg+0x150/0x200
[  446.964507]  ? __pfx___sys_sendmsg+0x10/0x10
[  446.964524]  ? __pfx_ksys_write+0x10/0x10
[  446.964553]  do_syscall_64+0xbf/0x360
[  446.964570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.964583] RIP: 0033:0x7f752e428b19
[  446.964592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  446.964603] RSP: 002b:00007f752b99e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.964615] RAX: ffffffffffffffda RBX: 00007f752e53bf60 RCX: 00007f752e428b19
[  446.964623] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  446.964630] RBP: 00007f752b99e1d0 R08: 0000000000000000 R09: 0000000000000000
[  446.964637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.964644] R13: 00007fffe575e06f R14: 00007f752b99e300 R15: 0000000000022000
[  446.964661]  </TASK>
07:08:01 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  447.054706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:08:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

07:08:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9)

07:08:02 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x89, 0x1, 0x4, 0x81, 0x1, 0x3, 0x3e, 0x1, 0x284, 0x40, 0x296, 0x9, 0x7ff, 0x38, 0x2, 0x6, 0xfffa, 0x4}, [{0x5, 0x9, 0x2, 0x2, 0x4, 0x32, 0x800, 0x1fe7ac71}], "98fe63e7f899422f85bf1382b9756a7ca942eaafc6e9fa63f0c57e17bce82a3cba9df2cd6975cb940499e216bf528df3507ad6314cf54ef126c21e247f7df20d1fc5022bb89e54ded383dd68124f40d00f417f683bc7545c876232bf2f4b3fa24e1ae3b13e819ed4184cdb0ce855", ['\x00', '\x00', '\x00', '\x00']}, 0x4e6)
openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8240}, 0x18)

07:08:02 executing program 6:
r0 = semget$private(0x0, 0x5, 0x0)
semctl$SEM_STAT(r0, 0x5, 0x10, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000140)="00000000df000000083d", 0xa, 0x4e0}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0])
setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'os2.', 'ext4\x00'}, &(0x7f00000001c0)='ext4\x00', 0x5, 0x1)
r2 = creat(&(0x7f0000000380)='./file0\x00', 0x11)
r3 = geteuid()
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x40, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@cache_mmap}, {@cache_mmap}, {@version_u}, {@msize={'msize', 0x3d, 0x9}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '),[-'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@euid_gt={'euid>', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'os2.'}}, {@context={'context', 0x3d, 'system_u'}}, {@audit}]}})
lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x400, 0x6}, {0x4, 0x7}]}, 0x14, 0x1)

[  447.159827] 9pnet: Could not find request transport: f�
07:08:02 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:08:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000004ac0)='J', 0x1}], 0x23, 0x0, 0x0, 0x15)

[  447.187894] FAULT_INJECTION: forcing a failure.
[  447.187894] name failslab, interval 1, probability 0, space 0, times 0
[  447.188838] CPU: 0 UID: 0 PID: 6614 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  447.188854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  447.188862] Call Trace:
[  447.188866]  <TASK>
[  447.188870]  dump_stack_lvl+0xfa/0x120
[  447.188891]  should_fail_ex+0x4d7/0x5e0
[  447.188907]  should_failslab+0xc2/0x120
[  447.188920]  kmem_cache_alloc_node_noprof+0x71/0x470
[  447.188939]  ? __alloc_skb+0x2ab/0x370
[  447.188963]  __alloc_skb+0x2ab/0x370
[  447.188981]  ? __pfx___alloc_skb+0x10/0x10
[  447.189000]  ? genl_rcv_msg+0x532/0x7e0
[  447.189019]  netlink_ack+0x167/0xbf0
[  447.189046]  netlink_rcv_skb+0x344/0x430
[  447.189069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  447.189083]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  447.189111]  ? netlink_deliver_tap+0x1ae/0xce0
[  447.189129]  ? is_vmalloc_addr+0x86/0xa0
[  447.189150]  genl_rcv+0x28/0x40
[  447.189161]  netlink_unicast+0x53d/0x7f0
[  447.189183]  ? __pfx_netlink_unicast+0x10/0x10
[  447.189208]  netlink_sendmsg+0x8ac/0xd80
[  447.189231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.189258]  ____sys_sendmsg+0xa67/0xc20
[  447.189275]  ? copy_msghdr_from_user+0xfb/0x150
[  447.189294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.189314]  ? lock_acquire+0x15e/0x2f0
[  447.189331]  ___sys_sendmsg+0x10f/0x1b0
[  447.189351]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.189369]  ? perf_trace_lock+0xb5/0x5d0
[  447.189386]  ? __pfx_perf_trace_lock+0x10/0x10
[  447.189398]  ? proc_fail_nth_write+0x98/0x250
[  447.189421]  ? lock_acquire+0x15e/0x2f0
[  447.189433]  ? __fget_files+0x34/0x3b0
[  447.189451]  ? find_held_lock+0x2b/0x80
[  447.189467]  ? __fget_files+0x203/0x3b0
[  447.189484]  ? lock_release+0xc8/0x290
[  447.189499]  ? __fget_files+0x20d/0x3b0
[  447.189522]  __sys_sendmsg+0x150/0x200
[  447.189533]  ? __pfx___sys_sendmsg+0x10/0x10
[  447.189549]  ? __pfx_ksys_write+0x10/0x10
[  447.189574]  do_syscall_64+0xbf/0x360
[  447.189592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.189605] RIP: 0033:0x7f752e428b19
[  447.189614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  447.189625] RSP: 002b:00007f752b99e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.189637] RAX: ffffffffffffffda RBX: 00007f752e53bf60 RCX: 00007f752e428b19
[  447.189645] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  447.189652] RBP: 00007f752b99e1d0 R08: 0000000000000000 R09: 0000000000000000
[  447.189659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.189666] R13: 00007fffe575e06f R14: 00007f752b99e300 R15: 0000000000022000
[  447.189683]  </TASK>
07:08:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  447.237043] loop6: detected capacity change from 0 to 8336
[  447.262703] ext4: Unknown parameter '00000000000000000000'
07:08:02 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[  447.304770] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  447.342419] 9pnet: Could not find request transport: f�
[  447.342869] loop6: detected capacity change from 0 to 8336
[  447.351435] ext4: Unknown parameter '00000000000000000001'
[  447.375697] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
07:08:11 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:08:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:08:11 executing program 6:
r0 = getpgid(0xffffffffffffffff)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00')
ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0)

07:08:11 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:11 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x2286, &(0x7f0000000000))

07:08:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:08:11 executing program 5:
mknod$loop(&(0x7f0000000580)='./file0\x00', 0x6000, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1cb)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x68e146a1)

07:08:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10)

07:08:11 executing program 4:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{}, {r2, r3/1000+10000}})
clock_gettime(0x0, &(0x7f0000000200))
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000180)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c})
chroot(&(0x7f0000000040)='./file0/../file0\x00')
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0)
symlinkat(&(0x7f0000000240)='./file0/../file0\x00', r0, &(0x7f0000000280)='./file0\x00')

07:08:11 executing program 6:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8, 0x800)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xee01}}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x54}}, 0x0)

[  456.603939] block device autoloading is deprecated and will be removed.
[  456.611082] block device autoloading is deprecated and will be removed.
[  456.632935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:08:11 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

[  456.673043] 9pnet: Could not find request transport: f�
07:08:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:08:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11)

07:08:11 executing program 5:
mknod$loop(&(0x7f0000000580)='./file0\x00', 0x6000, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1cb)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x68e146a1)

07:08:11 executing program 6:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
r1 = add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="be7480759255fad1e8951a59a5f613b2d0c2d186482de32992332679aa5b540135f36e3de2b2fee3278d", 0x2a, 0xfffffffffffffffd)
keyctl$link(0x8, r0, r1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000def361b116dd4bb681391964ccf077da010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03000200040000000500000016000f000300040000000000000000000f00698c2d50f7ae2cd54c9fbe1d944604fc184ba1f7500bc4e0a3157d24d5c026d137af6035b9af7d240b735cb22274e412199dde22ba9824fa79b68fc0a2250905fa9064b58fc452a80e208fa1e5706fdb89ae6665d7afdb44376d7ff61e96efdd89b9f0104513e84097dfd8d41fbf3b2d5eb08e0efa71da29f5f6e2c9258e7eeceb11c2fc1d0ab5b62c320b615de0cb20ea4aa68efdf8cae2", 0xb6, 0x800}, {&(0x7f0000010f00)="b2", 0x1, 0x1580}], 0x0, &(0x7f0000013b00))

07:08:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x24}], 0x1, 0x0, 0xe, 0x40080c4}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'})

[  456.764545] loop6: detected capacity change from 0 to 1024
[  456.774658] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 12607633836050874371)!
[  456.775502] EXT4-fs (loop6): group descriptors corrupted!
[  456.786483] loop6: detected capacity change from 0 to 1024
[  456.792772] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 12607633836050874371)!
[  456.793673] EXT4-fs (loop6): group descriptors corrupted!
07:08:11 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:11 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000140)="00000000df000000003d", 0xa, 0x4e0}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00))
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setfsuid(r0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x6a, 0x7}, {0x6, 0x3000000}], r0}, 0x18, 0x1)

[  456.865417] loop6: detected capacity change from 0 to 8336
07:08:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:08:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12)

[  456.905380] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz-executor.6: bad orphan inode 15616
[  456.934555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.996448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
07:08:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13)

07:08:20 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:08:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:08:20 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

07:08:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r6 = signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x8, 0x4, 0xff, 0x0, 0x300000000000, 0xc080, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xee17, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x488e4, 0x2000005, 0x10000, 0x1, 0xbf, 0x7, 0x44, 0x0, 0xffff, 0x0, 0xfffffffffffffc00}, 0xffffffffffffffff, 0x5, r6, 0x3)
clone3(&(0x7f0000000200)={0x61020900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:08:20 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:20 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x0)

07:08:20 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x541a, &(0x7f00000005c0))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x0, 0x635a, 0x6})
ioctl$TIOCCBRK(r1, 0x5428)

[  466.126521] FAULT_INJECTION: forcing a failure.
[  466.126521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.128524] CPU: 0 UID: 0 PID: 6713 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  466.128553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  466.128565] Call Trace:
[  466.128573]  <TASK>
[  466.128581]  dump_stack_lvl+0xfa/0x120
[  466.128614]  should_fail_ex+0x4d7/0x5e0
[  466.128642]  _copy_to_user+0x32/0xd0
[  466.128673]  simple_read_from_buffer+0xe0/0x180
[  466.128706]  proc_fail_nth_read+0x189/0x270
[  466.128741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.128776]  ? security_file_permission+0x22/0x90
[  466.128803]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.128836]  vfs_read+0x1eb/0xbe0
[  466.128875]  ? __pfx_vfs_read+0x10/0x10
[  466.128909]  ? lock_release+0xc8/0x290
[  466.128938]  ? __fget_files+0x20d/0x3b0
[  466.128982]  ksys_read+0x121/0x240
[  466.129014]  ? __pfx_ksys_read+0x10/0x10
[  466.129064]  do_syscall_64+0xbf/0x360
[  466.129094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.129116] RIP: 0033:0x7f752e3db69c
[  466.129132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  466.129153] RSP: 002b:00007f752b99e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  466.129173] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f752e3db69c
[  466.129187] RDX: 000000000000000f RSI: 00007f752b99e1e0 RDI: 0000000000000004
[  466.129200] RBP: 00007f752b99e1d0 R08: 0000000000000000 R09: 0000000000000000
[  466.129213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  466.129225] R13: 00007fffe575e06f R14: 00007f752b99e300 R15: 0000000000022000
[  466.129257]  </TASK>
[  466.193377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:08:21 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:08:21 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:21 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:21 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3663c2b228265b519f686ced4979bbe74fe4fa7108b8f371ea96b323d1ba7cb85399d30530085781dd50c4fde896320e5831dfbb988c3e0c8c77749d4a30"}, 0x80, 0x0}}], 0x2, 0x0)
recvmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000040), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/79, 0x4f}], 0x4, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x100)

[  466.305760] 9pnet: Could not find request transport: f�
[  466.339409] 9pnet: Could not find request transport: f�
07:08:21 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:08:21 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

07:08:21 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r6 = signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x8, 0x4, 0xff, 0x0, 0x300000000000, 0xc080, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xee17, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x488e4, 0x2000005, 0x10000, 0x1, 0xbf, 0x7, 0x44, 0x0, 0xffff, 0x0, 0xfffffffffffffc00}, 0xffffffffffffffff, 0x5, r6, 0x3)
clone3(&(0x7f0000000200)={0x61020900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  466.463259] 9pnet: Could not find request transport: f�
[  466.520118] 9pnet: Could not find request transport: f�
07:08:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:08:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x90)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x8, 0xfffb, 0x0, 0x8007ffb, 0x280})
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x63b, 0x0, 0x0, 0x0, 0x0, "aa59a2b8abf01000"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x0, 0xb01, 0x3, 0x5, 0x10, "aa59a67ab8abf010"})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0100000037e2dadc3c440617", @ANYRES32=<r5=>r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59ff0f0000f010"})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c99cc5acb7dd9f042a807936c927b03be41e2d7ca3a91b2870aa8eccbb0f10ffee7c86511828834639d783c7dc8780f8de338e9b9f33c4f1c1f8c30f83a76478b227c7fc177c984982efb11d32e960324d0ae7165492d328cda421773487fbb10d1bd14675ebbb2a8772d20fb239484944e4867ca774ac5cc368917df6b5204aef44a1359806ad2b254756d581fa886fcc52635a6c1afee9a6cbe9a8fd332f0aee2052234c81bd5d8577094be8798c86a2baa64b61767e7f87391d195b8e16505768bc184aeca05a0b9e6eb724da158185692add1af19df6bf17c6387eaa88bf628a4b936ff2decf270cba23", 0xec}], 0x1, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0b32a0b9b6e37e7b0ca9e107ff1d4542de77e18f3e97b0f4d311d93719f6ec8f303516af86ac08b7f1c4111d46d0f4a054bf757a9070df1a1bffff492663a4aa696a72323eaf94fd8527ea65c7c0520875b9ccd1ce4fe109194498a0d229fda14fe8b1b43ec6536bc6834733a5aa8fa078d2363d956cd1bc3e9bd64abbcd6c4b71c6c308b9f9ae3f8d12ef8b192fd21f3c800e2f69abbf625b16778d61d8f5aa4105f474134962f59586983edd7cd68db87883af3ce1f165768bde7e353e491510adc23d905bcb0394641313962777efae3514e1fd24e691540b878e349593c7879dc0eead3c19490a4a8a3e0f2a297edf6febc4e2b5bbd969ff9a308e1232eed3f5561ff7e69704ef98c9b3e8eb69c5af2558901f8cb5c85100e327b648615f14668c1c973b8532230012e2c7734c19654d08e740f7cc51a738706c940bda5ac1bd969fd96863037fe5e703d57d74deb2", @ANYRESHEX, @ANYRES16=r4, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r6, @ANYRES32=r4, @ANYRES64=r2, @ANYRES32=r5, @ANYRES32=r6], 0xb0, 0x4880}, 0x40001)
setxattr$security_selinux(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/12)

07:08:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x3a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x7654998f38eb432a}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:08:31 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:31 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

07:08:31 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r6 = signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x8, 0x4, 0xff, 0x0, 0x300000000000, 0xc080, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xee17, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x488e4, 0x2000005, 0x10000, 0x1, 0xbf, 0x7, 0x44, 0x0, 0xffff, 0x0, 0xfffffffffffffc00}, 0xffffffffffffffff, 0x5, r6, 0x3)
clone3(&(0x7f0000000200)={0x61020900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:08:31 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223d"])

[  476.456227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  476.476141] 9pnet: Could not find request transport: f�
07:08:31 executing program 6:
syz_io_uring_setup(0x20ce, &(0x7f0000000080)={0x0, 0x9ee5, 0x2, 0x1, 0x88}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r0=>0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000580), 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/252, 0xfc}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x7, &(0x7f0000003440)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000004440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000100)=[{&(0x7f00000044c0)=""/240, 0xf0}, {&(0x7f00000045c0)=""/218, 0xda}, {&(0x7f00000046c0)=""/209, 0xd1}, {&(0x7f00000047c0)=""/110, 0x6e}], 0x4, &(0x7f0000004840)=""/220, 0xdc}, 0x1}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000049c0)=""/76, 0x4c}, {&(0x7f0000004a40)=""/72, 0x48}, {&(0x7f0000004ac0)=""/231, 0xe7}], 0x3, &(0x7f0000004c00)=""/218, 0xda}, 0x1f}, {{0x0, 0x0, &(0x7f0000004d00), 0x0, &(0x7f0000004d40)=""/126, 0x7e}, 0x1}, {{&(0x7f0000004dc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004e40)=""/31, 0x1f}, {&(0x7f0000004e80)=""/128, 0x80}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/204, 0xcc}, {&(0x7f0000005000)=""/106, 0x6a}, {&(0x7f0000005080)=""/41, 0x29}], 0x7, &(0x7f00000051c0)=""/14, 0xe}, 0x82}], 0x5, 0x40004042, &(0x7f0000005340)={0x0, 0x989680})
recvmmsg$unix(r1, &(0x7f000000cd00)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/78, 0x4e}, {&(0x7f00000053c0)=""/214, 0xd6}, {&(0x7f00000054c0)=""/200, 0xc8}], 0x4}}, {{&(0x7f00000055c0), 0x6e, &(0x7f0000005700)=[{&(0x7f0000005640)=""/82, 0x52}, {&(0x7f00000056c0)}], 0x2, &(0x7f0000005740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000005800), 0x6e, &(0x7f0000008b80)=[{&(0x7f0000005880)=""/20, 0x14}, {&(0x7f0000008900)=""/74, 0x4a}, {&(0x7f0000008980)=""/112, 0x70}, {&(0x7f0000008a00)=""/122, 0x7a}, {&(0x7f0000008a80)=""/221, 0xdd}, {&(0x7f00000058c0)=""/4, 0x4}], 0x6}}, {{&(0x7f0000008c00), 0x6e, &(0x7f0000009e40)=[{&(0x7f0000008c80)=""/4096, 0x1000}, {&(0x7f0000009c80)=""/131, 0x83}, {&(0x7f0000009d40)=""/205, 0xcd}], 0x3, &(0x7f0000009e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000009f80), 0x6e, &(0x7f000000a1c0)=[{&(0x7f000000a000)=""/145, 0x91}, {&(0x7f000000a0c0)=""/201, 0xc9}], 0x2, &(0x7f000000a200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f000000a300)=""/26, 0x1a}, {&(0x7f000000a340)=""/123, 0x7b}], 0x2, &(0x7f000000a400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f000000b640)=[{&(0x7f000000a500)=""/77, 0x4d}, {&(0x7f000000a580)=""/2, 0x2}, {&(0x7f000000a5c0)=""/54, 0x36}, {&(0x7f000000a600)=""/4096, 0x1000}, {&(0x7f000000b600)=""/15, 0xf}], 0x5, &(0x7f000000b6c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f000000b740)=@abs, 0x6e, &(0x7f000000cc00)=[{&(0x7f000000b7c0)=""/133, 0x85}, {&(0x7f000000b880)=""/76, 0x4c}, {&(0x7f000000b900)=""/134, 0x86}, {&(0x7f000000b9c0)}, {&(0x7f000000ba00)=""/57, 0x39}, {&(0x7f000000ba40)=""/218, 0xda}, {&(0x7f000000bb40)=""/160, 0xa0}, {&(0x7f000000bc00)=""/4096, 0x1000}], 0x8, &(0x7f000000cc80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x8, 0x1, 0x0)
setxattr$security_ima(&(0x7f00000056c0)='./file0\x00', &(0x7f000000b9c0), &(0x7f000000cf00)=@v2={0x5, 0x1, 0x12, 0x1000, 0x8f, "b6ad53e49ecc3288a7ab97e22545051414adfa375ce885ca16368876215e87d32881b8052540c4a062aa321232c6da0a7b9b7fab2069f8d8cd4a5db1435a34b193ec850d45f802e8ee3114c7c4f6825d0ea7f76de286b149eb253a9207668679775b43e04b54f74a46f3807ace2eddb0a88c80b47fcd891eb820ae569508cb056a3147290c221f06f68c79ab63cca0"}, 0x98, 0x0)
r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500)=<r9=>0x0, &(0x7f0000000540))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x0, &(0x7f0000000580), 0x0, 0x4)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/252, 0xfc}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x7, &(0x7f0000003440)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000004440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000100)=[{&(0x7f00000044c0)=""/240, 0xf0}, {&(0x7f00000045c0)=""/218, 0xda}, {&(0x7f00000046c0)=""/209, 0xd1}, {&(0x7f00000047c0)=""/110, 0x6e}], 0x4, &(0x7f0000004840)=""/220, 0xdc}, 0x1}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, <r11=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000049c0)=""/76, 0x4c}, {&(0x7f0000004a40)=""/72, 0x48}, {&(0x7f0000004ac0)=""/231, 0xe7}], 0x3, &(0x7f0000004c00)=""/218, 0xda}, 0x1f}, {{0x0, 0x0, &(0x7f0000004d00), 0x0, &(0x7f0000004d40)=""/126, 0x7e}, 0x1}, {{&(0x7f0000004dc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004e40)=""/31, 0x1f}, {&(0x7f0000004e80)=""/128, 0x80}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/204, 0xcc}, {&(0x7f0000005000)=""/106, 0x6a}, {&(0x7f0000005080)=""/41, 0x29}], 0x7, &(0x7f00000051c0)=""/14, 0xe}, 0x82}], 0x5, 0x40004042, &(0x7f0000005340)={0x0, 0x989680})
syz_io_uring_submit(r9, 0x0, &(0x7f0000005380)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x5, {0x0, r8}, 0x81, 0x5, 0x0, {0x0, r10, r11}}, 0x661d)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r10)
syz_io_uring_submit(r4, 0x0, &(0x7f0000005380)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x5, {0x0, r3}, 0x81, 0x5, 0x0, {0x0, r5, r6}}, 0x661d)
syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd_index=0x6, 0x1fc0000000000, 0xc7c, 0x4, 0x6, 0x0, {0x2, r5}}, 0x3)

[  476.539525] 9pnet: Could not find request transport: f�
[  476.569229] 9pnet: Could not find request transport: f�
07:08:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:08:31 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  476.656329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.657448] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.658749] Buffer I/O error on dev sr0, logical block 0, async page read
[  476.674268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.675012] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.676310] Buffer I/O error on dev sr0, logical block 1, async page read
[  476.705919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.707169] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.709130] Buffer I/O error on dev sr0, logical block 2, async page read
[  476.724942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.725733] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.726844] Buffer I/O error on dev sr0, logical block 3, async page read
[  476.737534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.738337] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.739291] Buffer I/O error on dev sr0, logical block 4, async page read
[  476.750466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.750969] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.751906] Buffer I/O error on dev sr0, logical block 5, async page read
[  476.762570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.763324] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.764024] Buffer I/O error on dev sr0, logical block 6, async page read
[  476.788809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.789341] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.790057] Buffer I/O error on dev sr0, logical block 7, async page read
[  476.794739] 9pnet: Could not find request transport: f�
[  476.796979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.798449] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  476.800355] Buffer I/O error on dev sr0, logical block 0, async page read
[  476.815627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.817271] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0
[  476.817940] Buffer I/O error on dev sr0, logical block 1, async page read
[  476.822169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.822756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.826720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.836558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.838499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.841298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.846259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.850302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.858399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.873339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.881696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.882929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.889908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.893331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.902290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.903765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.917744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.922531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.931560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.937293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.938758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.942643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.944782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.945984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.948728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.949746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.951722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.953677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.955047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.956875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.958743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.960789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.967900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.980416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  476.981984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
07:08:41 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000013c0), 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000005400), 0x8)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40)
sendfile(0xffffffffffffffff, r3, 0x0, 0x10000)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x10000, 0x10}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500)=<r5=>0x0, &(0x7f0000000540))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000580), 0x0, 0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004d00), &(0x7f00000053c0)=0xc)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000005440)=""/239, 0xef}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/252, 0xfc}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x7, &(0x7f0000003440)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000004440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000100)=[{&(0x7f00000044c0)=""/240, 0xf0}, {&(0x7f00000045c0)=""/218, 0xda}, {&(0x7f00000046c0)=""/209, 0xd1}, {&(0x7f00000047c0)=""/110, 0x6e}], 0x4, &(0x7f0000004840)=""/220, 0xdc}, 0x1}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000049c0)=""/76, 0x4c}, {&(0x7f0000004a40)=""/72, 0x48}, {&(0x7f0000004ac0)=""/231, 0xe7}], 0x3, &(0x7f0000004c00)=""/218, 0xda}, 0x1f}, {{0x0, 0x0, &(0x7f0000004d00), 0x0, &(0x7f0000004d40)=""/126, 0x7e}, 0x1}, {{&(0x7f0000004dc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004e40)=""/31, 0x1f}, {&(0x7f0000004e80)=""/128, 0x80}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/204, 0xcc}, {&(0x7f0000005000)=""/106, 0x6a}, {&(0x7f0000005080)=""/41, 0x29}], 0x7, &(0x7f00000051c0)=""/14, 0xe}, 0x82}], 0x5, 0x40004042, &(0x7f0000005340)={0x0, 0x989680})
syz_io_uring_submit(r5, 0x0, &(0x7f0000005380)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x5, {0x0, r4}, 0x81, 0x5, 0x0, {0x0, r6, r7}}, 0x661d)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6)
perf_event_open(&(0x7f00000050c0)={0x2, 0x80, 0x6, 0x7, 0x32, 0x3, 0x0, 0x5, 0x200, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8001}, 0x608, 0x2, 0xfffffffc, 0x8, 0x100, 0x6, 0x1, 0x0, 0x5, 0x0, 0x10001}, 0xffffffffffffffff, 0x2, r4, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

07:08:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:08:41 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00')
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
recvfrom(r0, &(0x7f0000000000)=""/31, 0x1f, 0x2102, &(0x7f0000000080)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@null, @null, @null, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80)

07:08:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:08:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:08:41 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r6 = signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x8, 0x4, 0xff, 0x0, 0x300000000000, 0xc080, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xee17, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x488e4, 0x2000005, 0x10000, 0x1, 0xbf, 0x7, 0x44, 0x0, 0xffff, 0x0, 0xfffffffffffffc00}, 0xffffffffffffffff, 0x5, r6, 0x3)
clone3(&(0x7f0000000200)={0x61020900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:08:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX, @ANYBLOB=',wfdno='])

07:08:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

[  486.899939] 9pnet: Could not find request transport: f�
07:08:41 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

[  486.966630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:08:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  487.006553] 9pnet: Could not find request transport: f�
07:08:41 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:08:41 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x3)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001})
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r1 = getuid()
r2 = getuid()
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="c389dab6fede0ea461dbf5e0be36dba92df83007845c4212779ee81b25901dc9c251cb0f2ca5b824b28cb994e92e6f30c68ff0d82caf972e015a354bb10cc8bd1326cabe600739bf624a86fd8bad08bb832454dbab54ab0e28f584f8f45e261dd95d8834f067bf7d61d13c1cf44597d2b88acb0d2cabe68734f8e2a56f8f66454ad8b57ce929e721f0c5017938bb0b", 0x8f, 0x9}, {&(0x7f0000000180)="334712e322bce8b02ba93cb8e1f29f770698721030cae516b92a20e92b13a253fc97ca1e349956009bba64ddc0868a4ce72d2cc15100e132f33d85078ba518f86e67b426448f6df3720648ba037b32886ef3341874d830d6b8226fe70f7e12a24d1a8169", 0x64, 0x2424fd85}, {&(0x7f0000000200)="bc21aad87ae83f499e2aaeba78d856913575471afa5638829b6b6c929a6a71431481641008118e1e56cc7cd71109846716ccbffccb3554f2ef72d5", 0x3b, 0x2}, {&(0x7f0000000240)="100b87e26ff611c6324ecefce8505f8d0b77982be8620a20ed90677422563b0b58620d94502b7c06d2b5bc82cd3a047c6d78982d25a1be5ccd5b2eab2a9500d367403a1e236910f110775d0a7c56f3a582a09ce56a721188550b468c2e582df720cc1f281abed09f5dbe037dd875fd86ae8fdff2b67c2f02df65b2f091991ccb57dbab698890a1478f", 0x89, 0xff}, {&(0x7f0000000300)="e1401e89ffea14ecdb9d93711d629fafde3367af74eafe7ff41ed01cee036a5c92decfabb88fb4617100413089226dcf39973440a0c2f797f56d32c5e816e67abb186d553106e3e29c89716cd9c9a1b1dbf511aee6da1b63b106830cd243d0cb085d266abb29fdb4901afbc5ddec63fbb128ce5b7c0d80cbae46c4d8447ea05715b9a16974a18abb2885fac75f04eee66d79ea1f3db44de5c16ff97f994d83f64a28b9e14846c92480cbaf73f329", 0xae, 0x9}], 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='check=relaxed,errors=remount-ro,smackfsdef=%,euid<', @ANYRESDEC=0x0, @ANYBLOB="3365756950be50d9643d5ce539af5b79d995ad805dc0ff19f8a5647583d19a1b17db1e26b661e6be472387767a8c5dc4e665e2b09d8c85a3952c21ed8b03d3ed34dc5b26d4577bf87ead1643a7cbbcf99f486e8ceb6e42a169da417ec7f66a630420ed23d5662d380c7bc577e83fe08dfd22de99e4c40f2c9e13f86dcd72db2e0432c53f4d00c077bfc07eaf798281faee571b3f55033f94235b02947f17303da61ee93ca5fc858ba946e75032b30d01", @ANYRESDEC=r1, @ANYBLOB=',measure,permit_directio,dont_measure,euid<', @ANYRESDEC=r2, @ANYBLOB=',dont_appraise,\x00'])
write(r0, 0x0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x122)
r4 = socket$netlink(0x10, 0x3, 0x9)
write(r4, &(0x7f0000000780)="7ce2f6641bd3332a6ccb119b2aa0f80ffb7b38675d73ef8377728f5b9e2daaa1439a7fb7a2343e147372bca1f380adf19da558e15de9145a551d10e7e43a6fe2bae908085eef726db189bdcdfc811f19cd8b62ebb9c6e9ee5747f0c53194abec58ebb638dc2a34395bbbced216556c43d9f3e84447628e1e1ebf6084fd98f58b648f7c6c96048046df337421c424e8e945f98a5c5a688902b3bfcc7af05cfa5d19d7ee1e6d17f3364a270fe5210ac70f8c468cd73f0be5053fb5c180c7a764a68ea0826f56b6ece23f6a97e0681233adaa34467706f88c05ebf0f9de58f9df4d53e25fa60d", 0xe5)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000540)="ba69")

07:08:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

[  487.179561] 9pnet: Could not find request transport: f�
[  487.196859] 9pnet: Could not find request transport: f�
[  487.282457] loop6: detected capacity change from 0 to 255229
[  487.284042] msdos: Unknown parameter 'smackfsdef'
[  487.378629] loop6: detected capacity change from 0 to 255229
[  487.379669] msdos: Unknown parameter 'smackfsdef'
07:08:52 executing program 6:
chmod(&(0x7f0000000000)='./file0\x00', 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x262}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1)

07:08:52 executing program 5:
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r0)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x1)

07:08:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r6 = signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x8, 0x4, 0xff, 0x0, 0x300000000000, 0xc080, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xee17, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x488e4, 0x2000005, 0x10000, 0x1, 0xbf, 0x7, 0x44, 0x0, 0xffff, 0x0, 0xfffffffffffffc00}, 0xffffffffffffffff, 0x5, r6, 0x3)

07:08:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:08:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:08:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='t'])

07:08:52 executing program 7:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:52 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e", @ANYRESHEX])

07:08:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)

07:08:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='t'])

07:08:52 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r6 = signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x8, 0x4, 0xff, 0x0, 0x300000000000, 0xc080, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xee17, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x488e4, 0x2000005, 0x10000, 0x1, 0xbf, 0x7, 0x44, 0x0, 0xffff, 0x0, 0xfffffffffffffc00}, 0xffffffffffffffff, 0x5, r6, 0x3)

[  497.446329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:08:52 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r6 = signalfd4(r0, &(0x7f0000000080)={[0x6f]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x8, 0x4, 0xff, 0x0, 0x300000000000, 0xc080, 0x1d, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xee17, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x488e4, 0x2000005, 0x10000, 0x1, 0xbf, 0x7, 0x44, 0x0, 0xffff, 0x0, 0xfffffffffffffc00}, 0xffffffffffffffff, 0x5, r6, 0x3)

[  497.462501] 9pnet: Could not find request transport: f�
07:08:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:08:52 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  497.562384] 9pnet: Could not find request transport: f�
07:08:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='t'])

07:08:52 executing program 7:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:08:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans'])

[  497.761643] 9pnet: Could not find request transport: f�
[  497.855675] 9pnet: Could not find request transport: f�
07:09:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000098c8bbf9e39387ca13ba747c78ba658a0267bad260d0c75733538e9cbe07b9f64ec10716203da81d56ccb8a2a41ca4f49c56d6483019166c06638ad2e9adcc896d09ea9a9290", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00011009"], 0xb0}}], 0x1, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:09:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x80)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)
clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000005840)=[0x0], 0x1}, 0x58)

07:09:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:02 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x80000, 0x3ff)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2008, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000000000,version=9p2000,fscontext=sysadm_u,permit_directio,uid>', @ANYRESDEC=r2, @ANYBLOB="2c65751d643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:09:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setfsuid(r5)
syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0xc5ec, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="9c7368f2092b4bdabde74015f55b352f45d92b777a1c26488bfa75", 0x1b, 0x4}], 0x200000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xe9}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@uid={'uid', 0x3d, r4}}, {@nr_blocks}, {@mode={'mode', 0x3d, 0x7}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x34, 0x74, 0x34]}}, {@mode={'mode', 0x3d, 0x3}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x4910}}], [{@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})

07:09:02 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:09:02 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans'])

07:09:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:02 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

[  508.015032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:09:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
setfsuid(r4)

07:09:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:02 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans'])

[  508.143392] 9pnet: Could not find request transport: f�
07:09:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640), 0x1100)

07:09:03 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:09:12 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:09:12 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:12 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:09:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:09:12 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x80000, 0x3ff)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2008, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000000000,version=9p2000,fscontext=sysadm_u,permit_directio,uid>', @ANYRESDEC=r2, @ANYBLOB="2c65751d643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:09:12 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:09:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8)

07:09:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xbe, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  517.593858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:09:12 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans'])

07:09:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

07:09:12 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r2, 0x4, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fcntl$getown(r3, 0x10)
r4 = signalfd4(r1, &(0x7f0000000080)={[0x3ff]}, 0x8, 0x80800)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000005dc639a768d5733a410000000396eb83a8ae593df30000000100000000000000040000000000000000501f0800000000000000000000000000000000000000000419000000000000000000000000000007000000000000000000000000000000008000"/144])
readahead(0xffffffffffffffff, 0x0, 0x0)
readahead(r1, 0x0, 0x7)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
read$ptp(r1, &(0x7f00000000c0)=""/4, 0x4)
readahead(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
creat(&(0x7f0000000040)='./file0\x00', 0x40)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0)
signalfd4(r7, &(0x7f0000000280)={[0x8]}, 0x8, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

07:09:12 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:09:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>r0, @in_args={0x2}}, './file0\x00'})
fsetxattr(r2, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)='\x00', 0x1, 0x3)

[  517.823599] 9pnet: Could not find request transport: f�
[  517.825738] 9pnet: Could not find request transport: f
07:09:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:12 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:12 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:09:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'})

07:09:12 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

[  518.054397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  518.117947] 9pnet: Could not find request transport: f�
07:09:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:21 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:09:21 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:21 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)

07:09:21 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:09:21 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a0066", 0x9b, 0xf000}], 0x0, &(0x7f0000013500))
lstat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000240)={0x87, ""/135})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'})

07:09:21 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r2, 0x4, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
fcntl$getown(r3, 0x10)
r4 = signalfd4(r1, &(0x7f0000000080)={[0x3ff]}, 0x8, 0x80800)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000005dc639a768d5733a410000000396eb83a8ae593df30000000100000000000000040000000000000000501f0800000000000000000000000000000000000000000419000000000000000000000000000007000000000000000000000000000000008000"/144])
readahead(0xffffffffffffffff, 0x0, 0x0)
readahead(r1, 0x0, 0x7)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
read$ptp(r1, &(0x7f00000000c0)=""/4, 0x4)
readahead(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
creat(&(0x7f0000000040)='./file0\x00', 0x40)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0)
signalfd4(r7, &(0x7f0000000280)={[0x8]}, 0x8, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

07:09:21 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:09:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  526.841292] loop6: detected capacity change from 0 to 240
[  526.854918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:09:21 executing program 5:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x2c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2)
r4 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x24, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x200000f4)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000700)={'wpan1\x00', <r13=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r12, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x30}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="240005dfe4111b23e3ea56ffd1401f79fbfe7250b34a47e003a4d73e51a3ef0a593fe202cf362a630ecb6e0ce84d4c7b995664cfa1fd7b92d903a594a19f48ccde69e7db5dd21ab4be59d54ef2f86bcf0733b6e2336e1ecf111bd8192ae774b7294af1e8c270462a22c26a2db63814309526d984303c07591d8478fce0cda1fce93ac6a556c7fbd844c76c9f0bf6247f88bed75cce09cfdfc2e3c4e4cc113310f76e38904a9df9566064b612", @ANYRES16=r9, @ANYBLOB="00082cbd7000fcdbdf252a000000050037000000000008000200", @ANYRES32=r13, @ANYBLOB], 0x24}}, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4dcad43c5bd5c4363c2b95901b86c9b0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000)

07:09:21 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:09:21 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x8000000)

07:09:21 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223d"])

[  526.961947] 9pnet: Could not find request transport: f�
[  527.092736] 9pnet: Could not find request transport: f�
07:09:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:33 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:09:33 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600))
clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58)

07:09:33 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 1)

07:09:33 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

07:09:33 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:33 executing program 6:
madvise(&(0x7f0000ded000/0x3000)=nil, 0x3000, 0x12)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil)

07:09:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223d"])

[  538.661219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.750950] 9pnet: Could not find request transport: f�
07:09:33 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)

07:09:33 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 2)

07:09:33 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000013c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="ebafe58181ff732e66617400028001000440000004f8010ae500aa0a3b7a286d6e5294b89f06e08557306db829284eed49b00c7cada5b789ce219a80d8eae54826994cd5", 0x44}, {&(0x7f0000000080)="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", 0x139, 0xb00}], 0x1001, &(0x7f0000001440)=ANY=[])
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041e"], 0x9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
io_setup(0x2, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfe, 0x0, 0x419}}}, 0x7)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = dup(r2)
bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x40040)
openat(r3, &(0x7f00000002c0)='./file0\x00', 0x404000, 0x94)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x1, @any, 0x81}}}, 0xb)
futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

07:09:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223d"])

07:09:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  538.850853] 9pnet: Could not find request transport: f�
[  538.875353] loop5: detected capacity change from 0 to 11
07:09:33 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
fork()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600))
socket$nl_xfrm(0x10, 0x3, 0x6)
clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r0}}, 0x58)

[  538.893539] Bluetooth: hci3: unexpected event for opcode 0x0419
[  538.905978] loop5: detected capacity change from 0 to 11
[  538.913973] Bluetooth: hci3: unexpected event for opcode 0x0419
[  538.944933] 9pnet: Could not find request transport: f
07:09:33 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 3)

07:09:33 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:33 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x40)
pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000004ac0)='J', 0xffffff9b}], 0x23, 0x0, 0x0, 0x15)
ftruncate(r0, 0x5)

[  539.042824] FAULT_INJECTION: forcing a failure.
[  539.042824] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  539.044336] CPU: 1 UID: 0 PID: 7085 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  539.044358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  539.044368] Call Trace:
[  539.044374]  <TASK>
[  539.044380]  dump_stack_lvl+0xfa/0x120
[  539.044406]  should_fail_ex+0x4d7/0x5e0
[  539.044428]  _copy_from_user+0x30/0xd0
[  539.044452]  memdup_user+0x7e/0xe0
[  539.044479]  strndup_user+0x78/0xe0
[  539.044505]  __x64_sys_mount+0x136/0x300
[  539.044534]  ? __pfx___x64_sys_mount+0x10/0x10
[  539.044569]  do_syscall_64+0xbf/0x360
[  539.044593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.044610] RIP: 0033:0x7f0f4d77eb19
[  539.044623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  539.044638] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  539.044654] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  539.044665] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  539.044675] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  539.044685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.044695] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  539.044719]  </TASK>
07:09:34 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)

07:09:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xbe00, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:34 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:09:34 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 4)

[  539.132368] 9pnet: Could not find request transport: f�
[  539.203850] FAULT_INJECTION: forcing a failure.
[  539.203850] name failslab, interval 1, probability 0, space 0, times 0
[  539.205087] CPU: 1 UID: 0 PID: 7095 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  539.205109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  539.205118] Call Trace:
[  539.205124]  <TASK>
[  539.205130]  dump_stack_lvl+0xfa/0x120
[  539.205157]  should_fail_ex+0x4d7/0x5e0
[  539.205179]  should_failslab+0xc2/0x120
[  539.205195]  __kmalloc_cache_noprof+0x73/0x470
[  539.205218]  ? __might_fault+0xe0/0x190
[  539.205238]  ? copy_mount_options+0x55/0x180
[  539.205260]  ? copy_mount_options+0x55/0x180
[  539.205275]  ? memdup_user+0x95/0xe0
[  539.205300]  copy_mount_options+0x55/0x180
[  539.205319]  __x64_sys_mount+0x1ab/0x300
[  539.205347]  ? __pfx___x64_sys_mount+0x10/0x10
[  539.205381]  do_syscall_64+0xbf/0x360
[  539.205404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.205421] RIP: 0033:0x7f0f4d77eb19
[  539.205433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  539.205449] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  539.205464] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  539.205474] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  539.205484] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  539.205494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.205503] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  539.205525]  </TASK>
[  539.253616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  539.789610] syz-executor.5 (7103) used greatest stack depth: 23968 bytes left
[  542.951188] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  542.952407] Bluetooth: hci3: Injecting HCI hardware error event
[  542.954879] Bluetooth: hci3: hardware error 0x00
[  544.999173] Bluetooth: hci3: Opcode 0x0c03 failed: -110
07:09:44 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 5)

07:09:44 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x301081, 0x10)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:09:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:44 executing program 6:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)={'veth1_to_team'}, 0x10)
r2 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10)
fallocate(r2, 0x2, 0x1, 0xffffffffffffffff)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)=@v3, 0x18, 0x0)
sendfile(r0, r3, 0x0, 0x5)

07:09:44 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:09:44 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119b"])

07:09:44 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00'})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000036000e0080000000ffffffffffff08021100000008708532be0000000000000000000000640001003c04003fac0576067f0804000300000008007e000100000008000c006400000008000d000000000008000d0001000000080035000000000004000501"], 0x78}}, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = getpgid(0x0)
r8 = fork()
kcmp(r8, r7, 0x0, r6, r6)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = getpgid(0x0)
r11 = fork()
kcmp(r11, r10, 0x0, r9, r9)
clone3(&(0x7f0000001540)={0x100186400, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x28}, &(0x7f0000000480)=""/143, 0x8f, &(0x7f0000000540)=""/4096, &(0x7f00000003c0)=[0x0, r8, 0x0, r11, 0xffffffffffffffff], 0x5, {r1}}, 0x58)

07:09:44 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  550.111877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:09:45 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000000c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41070000080001dff4655fe0f4655fe0f4655f1de500000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080))
rmdir(&(0x7f0000000040)='./file0/file0\x00')

07:09:45 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

[  550.265508] loop6: detected capacity change from 0 to 512
[  550.280781] 9pnet: Could not find request transport: f
07:09:45 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  550.360868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
07:09:45 executing program 4:
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:09:45 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 6)

[  550.420921] 9pnet: Could not find request transport: f�
07:09:45 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119b"])

[  550.538550] FAULT_INJECTION: forcing a failure.
[  550.538550] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  550.540346] CPU: 1 UID: 0 PID: 7155 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  550.540375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  550.540387] Call Trace:
[  550.540395]  <TASK>
[  550.540403]  dump_stack_lvl+0xfa/0x120
[  550.540437]  should_fail_ex+0x4d7/0x5e0
[  550.540465]  _copy_from_user+0x30/0xd0
[  550.540496]  copy_mount_options+0x76/0x180
[  550.540524]  __x64_sys_mount+0x1ab/0x300
[  550.540560]  ? __pfx___x64_sys_mount+0x10/0x10
[  550.540607]  do_syscall_64+0xbf/0x360
[  550.540637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.540659] RIP: 0033:0x7f0f4d77eb19
[  550.540676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  550.540696] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  550.540717] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  550.540731] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  550.540744] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  550.540757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.540769] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  550.540801]  </TASK>
[  550.563621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.677444] 9pnet: Could not find request transport: f
[  550.678893] 9pnet: Could not find request transport: f�
07:09:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:09:56 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde"])

07:09:56 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 7)

07:09:56 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)="0de2", 0x2)
close(r0)

07:09:56 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00'})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000036000e0080000000ffffffffffff08021100000008708532be0000000000000000000000640001003c04003fac0576067f0804000300000008007e000100000008000c006400000008000d000000000008000d0001000000080035000000000004000501"], 0x78}}, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = getpgid(0x0)
r8 = fork()
kcmp(r8, r7, 0x0, r6, r6)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = getpgid(0x0)
r11 = fork()
kcmp(r11, r10, 0x0, r9, r9)
clone3(&(0x7f0000001540)={0x100186400, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x28}, &(0x7f0000000480)=""/143, 0x8f, &(0x7f0000000540)=""/4096, &(0x7f00000003c0)=[0x0, r8, 0x0, r11, 0xffffffffffffffff], 0x5, {r1}}, 0x58)

07:09:56 executing program 4:
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:09:56 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:09:56 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

[  562.053945] FAULT_INJECTION: forcing a failure.
[  562.053945] name failslab, interval 1, probability 0, space 0, times 0
[  562.055796] CPU: 0 UID: 0 PID: 7178 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  562.055827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  562.055840] Call Trace:
[  562.055847]  <TASK>
[  562.055856]  dump_stack_lvl+0xfa/0x120
[  562.055891]  should_fail_ex+0x4d7/0x5e0
[  562.055919]  ? getname_flags.part.0+0x48/0x540
[  562.055947]  should_failslab+0xc2/0x120
[  562.055970]  kmem_cache_alloc_noprof+0x5f/0x470
[  562.056013]  getname_flags.part.0+0x48/0x540
[  562.056064]  getname_flags+0x95/0xe0
[  562.056098]  user_path_at+0x27/0x90
[  562.056134]  __x64_sys_mount+0x1e9/0x300
[  562.056174]  ? __pfx___x64_sys_mount+0x10/0x10
[  562.056223]  do_syscall_64+0xbf/0x360
[  562.056256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.056279] RIP: 0033:0x7f0f4d77eb19
[  562.056297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  562.056318] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  562.056340] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  562.056356] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  562.056369] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  562.056383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.056397] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  562.056429]  </TASK>
[  562.074858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.133308] 9pnet: Could not find request transport: f�
07:10:06 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:10:06 executing program 5:
r0 = semget$private(0x0, 0x5, 0x0)
semctl$SEM_STAT(r0, 0x5, 0x10, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x803}, {&(0x7f0000011500)="ed41070000080001dff4655fe0f4655fe0f4655f1de500000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0])
getdents64(r1, &(0x7f0000000140)=""/125, 0x7d)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
mkdirat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x264600, 0x8, 0x10}, 0x18)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
getdents64(r4, &(0x7f0000000480)=""/4096, 0x1000)
open_by_handle_at(r3, &(0x7f0000000380)=@FILEID_INO32_GEN={0x8, 0x1, {0x200, 0x6}}, 0x240000)
rmdir(&(0x7f0000000040)='./file0/file0\x00')
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
getdents(r5, &(0x7f0000000280)=""/118, 0x76)

07:10:06 executing program 4:
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:06 executing program 6:
symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000180)='./file0\x00', 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x400)

07:10:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde"])

07:10:06 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 8)

07:10:06 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  571.848356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:10:06 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

[  571.871930] loop5: detected capacity change from 0 to 512
[  571.901588] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 33554432)!
[  571.903280] EXT4-fs (loop5): group descriptors corrupted!
07:10:06 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  571.967416] 9pnet: Could not find request transport: f�
07:10:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  571.991597] 9pnet: Could not find request transport: f
[  571.999786] loop5: detected capacity change from 0 to 512
[  572.007811] ext4: Unknown parameter '
'
07:10:06 executing program 6:
pipe(0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')

07:10:06 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:06 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 9)

07:10:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c"])

[  572.180269] FAULT_INJECTION: forcing a failure.
[  572.180269] name fail_usercopy, interval 1, probability 0, space 0, times 0
07:10:07 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  572.182115] CPU: 1 UID: 0 PID: 7226 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  572.182145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  572.182157] Call Trace:
[  572.182165]  <TASK>
[  572.182174]  dump_stack_lvl+0xfa/0x120
[  572.182208]  should_fail_ex+0x4d7/0x5e0
[  572.182235]  strncpy_from_user+0x3b/0x2f0
[  572.182272]  getname_flags.part.0+0x8d/0x540
[  572.182303]  getname_flags+0x95/0xe0
[  572.182335]  user_path_at+0x27/0x90
[  572.182369]  __x64_sys_mount+0x1e9/0x300
[  572.182405]  ? __pfx___x64_sys_mount+0x10/0x10
[  572.182452]  do_syscall_64+0xbf/0x360
[  572.182482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.182504] RIP: 0033:0x7f0f4d77eb19
[  572.182521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  572.182541] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  572.182562] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  572.182577] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  572.182589] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  572.182602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.182615] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  572.182646]  </TASK>
07:10:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:07 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:10:07 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x559, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20048055)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000000))
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
clone3(&(0x7f0000000240)={0x40022000, &(0x7f0000000040), &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/186, 0xba, &(0x7f00000001c0)=""/38, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r6}}, 0x58)
fcntl$lock(r7, 0x24, &(0x7f00000002c0)={0x2, 0x4, 0xbfde, 0x2b, r8})

07:10:07 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 10)

07:10:07 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

[  572.375860] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups)
[  572.399589] 9pnet: Could not find request transport: f�
07:10:07 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223dde571eea3daa119bab0762fb80f87e"])

07:10:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  572.482475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.494346] FAULT_INJECTION: forcing a failure.
[  572.494346] name failslab, interval 1, probability 0, space 0, times 0
[  572.495989] CPU: 1 UID: 0 PID: 7243 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  572.496027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  572.496040] Call Trace:
[  572.496048]  <TASK>
[  572.496063]  dump_stack_lvl+0xfa/0x120
[  572.496096]  should_fail_ex+0x4d7/0x5e0
[  572.496124]  should_failslab+0xc2/0x120
[  572.496156]  __kmalloc_cache_noprof+0x73/0x470
[  572.496185]  ? find_held_lock+0x2b/0x80
[  572.496218]  ? __get_fs_type+0xe6/0x160
[  572.496236]  ? alloc_fs_context+0x58/0x9e0
[  572.496273]  ? alloc_fs_context+0x58/0x9e0
[  572.496301]  ? _raw_read_unlock+0x1e/0x40
[  572.496322]  alloc_fs_context+0x58/0x9e0
[  572.496360]  path_mount+0xab9/0x1d70
[  572.496396]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  572.496434]  ? __pfx_path_mount+0x10/0x10
[  572.496469]  ? kmem_cache_free+0x2a1/0x460
[  572.496500]  ? putname.part.0+0x11b/0x160
[  572.496524]  ? getname_flags.part.0+0x1c6/0x540
[  572.496553]  ? putname.part.0+0x11b/0x160
[  572.496582]  __x64_sys_mount+0x27b/0x300
[  572.496618]  ? __pfx___x64_sys_mount+0x10/0x10
[  572.496664]  do_syscall_64+0xbf/0x360
[  572.496694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.496716] RIP: 0033:0x7f0f4d77eb19
[  572.496733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  572.496753] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  572.496774] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  572.496789] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  572.496801] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  572.496814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  572.496827] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  572.496858]  </TASK>
[  572.536482] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups)
07:10:18 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
readahead(r6, 0xcf6b, 0x5)

07:10:18 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c"])

07:10:18 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:10:18 executing program 4:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x559, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20048055)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000000))
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
clone3(&(0x7f0000000240)={0x40022000, &(0x7f0000000040), &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/186, 0xba, &(0x7f00000001c0)=""/38, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r6}}, 0x58)
fcntl$lock(r7, 0x24, &(0x7f00000002c0)={0x2, 0x4, 0xbfde, 0x2b, r8})

07:10:18 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:10:18 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 11)

07:10:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  583.443761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.450457] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups)
[  583.515901] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  583.517413] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  583.518538] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  583.519613] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 18 00 00 02 00
[  583.520807] blk_print_req_error: 35 callbacks suppressed
[  583.520822] I/O error, dev sr0, sector 96 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
07:10:18 executing program 4:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x559, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20048055)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000000))
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
clone3(&(0x7f0000000240)={0x40022000, &(0x7f0000000040), &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0), {0xb}, &(0x7f0000000100)=""/186, 0xba, &(0x7f00000001c0)=""/38, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r6}}, 0x58)
fcntl$lock(r7, 0x24, &(0x7f00000002c0)={0x2, 0x4, 0xbfde, 0x2b, r8})

07:10:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  583.668962] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups)
[  583.699610] 9pnet: Could not find request transport: f�
[  583.725611] 9pnet: Could not find request transport: f
07:10:26 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c"])

07:10:26 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:10:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:26 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 12)

07:10:26 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:26 executing program 5:
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000)
signalfd(r0, &(0x7f0000000080)={[0x7]}, 0x8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setfsuid(r3)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in=@empty, 0x4e24, 0x8, 0x4e20, 0x8, 0x2, 0x80, 0x80, 0x1a, 0x0, r3}, {0x9, 0xc0000000000, 0x5, 0x12000000000000, 0xa6a, 0x9, 0x0, 0x1}, {0x3, 0x4, 0xfffffffffffffff8, 0x78e5}, 0x60d5, 0x6e6bb4, 0x0, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x4d6, 0xff}, 0x2, @in6=@empty, 0x3500, 0x3, 0x3, 0x40, 0x6, 0x8001, 0x2}}, 0xe8)
r4 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xff}, {0x6}]}, 0x10)

07:10:26 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:10:26 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
readahead(r6, 0xcf6b, 0x5)

[  591.992447] FAULT_INJECTION: forcing a failure.
[  591.992447] name failslab, interval 1, probability 0, space 0, times 0
[  591.994516] CPU: 0 UID: 0 PID: 7301 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  591.994552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  591.994571] Call Trace:
[  591.994580]  <TASK>
[  591.994590]  dump_stack_lvl+0xfa/0x120
[  591.994628]  should_fail_ex+0x4d7/0x5e0
[  591.994661]  should_failslab+0xc2/0x120
[  591.994687]  __kmalloc_cache_noprof+0x73/0x470
[  591.994724]  ? __kmalloc_cache_noprof+0x369/0x470
[  591.994757]  ? legacy_init_fs_context+0x44/0xe0
[  591.994802]  ? legacy_init_fs_context+0x44/0xe0
[  591.994836]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  591.994864]  legacy_init_fs_context+0x44/0xe0
[  591.994900]  ? __pfx_legacy_init_fs_context+0x10/0x10
[  591.994936]  alloc_fs_context+0x570/0x9e0
[  591.994981]  path_mount+0xab9/0x1d70
[  591.995025]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  591.995078]  ? __pfx_path_mount+0x10/0x10
[  591.995120]  ? kmem_cache_free+0x2a1/0x460
[  591.995158]  ? putname.part.0+0x11b/0x160
[  591.995188]  ? getname_flags.part.0+0x1c6/0x540
[  591.995223]  ? putname.part.0+0x11b/0x160
[  591.995258]  __x64_sys_mount+0x27b/0x300
[  591.995301]  ? __pfx___x64_sys_mount+0x10/0x10
[  591.995357]  do_syscall_64+0xbf/0x360
[  591.995394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.995421] RIP: 0033:0x7f0f4d77eb19
[  591.995441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  591.995465] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  591.995490] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  591.995507] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  591.995523] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  591.995538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  591.995553] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  591.995591]  </TASK>
[  591.998797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:10:26 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:26 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
readahead(r6, 0xcf6b, 0x5)

07:10:26 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:10:27 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 13)

07:10:27 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  592.201731] 9pnet: Could not find request transport: f�
07:10:27 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

07:10:27 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='tr'])

[  592.342143] 9pnet: Could not find request transport: f
07:10:38 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
readahead(r6, 0xcf6b, 0x5)

07:10:38 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 14)

07:10:38 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:10:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:38 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:10:38 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='tr'])

07:10:38 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x404c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x2000000, 0x3, 0x0, 0x8000000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x5)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r2)
ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000040)=0xeaac, 0x4)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1)
dup(r3)

[  603.208802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  603.226793] FAULT_INJECTION: forcing a failure.
[  603.226793] name failslab, interval 1, probability 0, space 0, times 0
[  603.228777] CPU: 0 UID: 0 PID: 7347 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  603.228807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  603.228819] Call Trace:
[  603.228827]  <TASK>
[  603.228836]  dump_stack_lvl+0xfa/0x120
[  603.228870]  should_fail_ex+0x4d7/0x5e0
[  603.228898]  should_failslab+0xc2/0x120
[  603.228920]  __kmalloc_cache_noprof+0x73/0x470
[  603.228951]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  603.228985]  ? v9fs_mount+0x9d/0x9e0
[  603.229012]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  603.229058]  ? v9fs_mount+0x9d/0x9e0
[  603.229085]  v9fs_mount+0x9d/0x9e0
[  603.229113]  ? __pfx_v9fs_mount+0x10/0x10
[  603.229142]  ? cap_capable+0xdb/0x3b0
[  603.229178]  ? __pfx_v9fs_mount+0x10/0x10
[  603.229205]  legacy_get_tree+0x109/0x220
[  603.229238]  vfs_get_tree+0x93/0x340
[  603.229267]  path_mount+0x122f/0x1d70
[  603.229304]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  603.229341]  ? __pfx_path_mount+0x10/0x10
[  603.229376]  ? kmem_cache_free+0x2a1/0x460
[  603.229407]  ? putname.part.0+0x11b/0x160
[  603.229432]  ? getname_flags.part.0+0x1c6/0x540
[  603.229461]  ? putname.part.0+0x11b/0x160
[  603.229489]  __x64_sys_mount+0x27b/0x300
[  603.229525]  ? __pfx___x64_sys_mount+0x10/0x10
[  603.229572]  do_syscall_64+0xbf/0x360
[  603.229602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.229625] RIP: 0033:0x7f0f4d77eb19
[  603.229641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  603.229662] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  603.229683] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  603.229697] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  603.229710] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  603.229723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  603.229735] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  603.229766]  </TASK>
07:10:38 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:38 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:10:38 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='tr'])

07:10:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:49 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r6, 0xcf6b, 0x5)

07:10:49 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:10:49 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[])

07:10:49 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:49 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 15)

07:10:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:49 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:10:49 executing program 5:
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x100000001, 0x81, 0x7, 0x400000000000, 0xffff]}, &(0x7f0000000080)=0x78)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), &(0x7f0000005740), {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = getpgid(0x0)
r1 = fork()
kcmp(r1, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = getpgid(0x0)
r4 = fork()
kcmp(r4, r3, 0x0, r2, r2)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = getpgid(0x0)
r7 = fork()
kcmp(r7, r6, 0x0, r5, r5)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = getpgid(0x0)
r10 = fork()
kcmp(r10, r9, 0x0, r8, r8)
r11 = getpid()
clone3(&(0x7f0000000340)={0x1080, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0), {0x22}, &(0x7f0000000200)=""/190, 0xbe, &(0x7f00000002c0)=""/21, &(0x7f0000000300)=[r0, r3, r7, r9, r11], 0x5}, 0x58)

07:10:50 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

[  615.177590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:10:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:50 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

[  615.231275] 9pnet: Could not find request transport: f
07:10:50 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:10:50 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 16)

07:10:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:50 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

07:10:50 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:50 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:10:50 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0xfffffffd, 0xfffffff9, 0x10001, 0x57df2c6e, 0xba, "fcc61e2e9321f20b43ffc80d8fb3c7113c6c1d"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000))
pipe2(&(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x4000)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x683, 0x1, 0x1, 0x7, 0x4, "251cae5320cae3831d08a44e7b64f42ee18924", 0x8})
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000040))

[  615.444681] FAULT_INJECTION: forcing a failure.
[  615.444681] name failslab, interval 1, probability 0, space 0, times 0
[  615.445792] CPU: 1 UID: 0 PID: 7409 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  615.445828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  615.445843] Call Trace:
[  615.445850]  <TASK>
[  615.445854]  dump_stack_lvl+0xfa/0x120
[  615.445878]  should_fail_ex+0x4d7/0x5e0
[  615.445895]  should_failslab+0xc2/0x120
[  615.445908]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  615.445928]  ? v9fs_mount+0x9d/0x9e0
[  615.445944]  ? legacy_get_tree+0x109/0x220
[  615.445960]  ? vfs_get_tree+0x93/0x340
[  615.445975]  ? path_mount+0x122f/0x1d70
[  615.445994]  ? __x64_sys_mount+0x27b/0x300
[  615.446012]  ? v9fs_session_init+0xaa/0x17a0
[  615.446023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.446040]  kstrdup+0x3e/0xc0
[  615.446063]  v9fs_session_init+0xaa/0x17a0
[  615.446077]  ? find_held_lock+0x2b/0x80
[  615.446100]  ? __create_object+0x59/0x80
[  615.446115]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  615.446128]  ? __pfx_v9fs_session_init+0x10/0x10
[  615.446141]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  615.446152]  ? __create_object+0x59/0x80
[  615.446166]  ? __kmalloc_cache_noprof+0x369/0x470
[  615.446190]  v9fs_mount+0xbc/0x9e0
[  615.446205]  ? __pfx_v9fs_mount+0x10/0x10
[  615.446221]  ? cap_capable+0xdb/0x3b0
[  615.446241]  ? __pfx_v9fs_mount+0x10/0x10
[  615.446255]  legacy_get_tree+0x109/0x220
[  615.446272]  vfs_get_tree+0x93/0x340
[  615.446287]  path_mount+0x122f/0x1d70
[  615.446306]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  615.446330]  ? __pfx_path_mount+0x10/0x10
[  615.446349]  ? kmem_cache_free+0x2a1/0x460
[  615.446366]  ? putname.part.0+0x11b/0x160
[  615.446380]  ? getname_flags.part.0+0x1c6/0x540
[  615.446396]  ? putname.part.0+0x11b/0x160
[  615.446411]  __x64_sys_mount+0x27b/0x300
[  615.446431]  ? __pfx___x64_sys_mount+0x10/0x10
[  615.446456]  do_syscall_64+0xbf/0x360
[  615.446474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.446485] RIP: 0033:0x7f0f4d77eb19
[  615.446495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  615.446506] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  615.446518] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  615.446526] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  615.446533] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  615.446540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  615.446547] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  615.446564]  </TASK>
07:10:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:10:58 executing program 5:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpgid(0x0)
r2 = fork()
kcmp(r2, r1, 0x0, r0, r0)
process_vm_readv(r1, &(0x7f0000000580)=[{&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000540)=""/61, 0x3d}], 0x5, &(0x7f0000000640)=[{&(0x7f0000000600)=""/7, 0x7}], 0x1, 0x0)
ioprio_get$pid(0x2, r1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02000000030000000400000032", 0xd, 0x1000}, {0x0, 0x0, 0x4100}], 0x0, &(0x7f0000013800))
openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x10400, 0xe)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000080)=""/7, 0x7}], 0x3}, 0x10042)

07:10:58 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:10:58 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223d"])

07:10:58 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

07:10:58 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 17)

07:10:58 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:10:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xbe000000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xd9b486ef, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

[  623.796531] 9pnet: Could not find request transport: f�
07:10:58 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

[  623.859355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:10:58 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664d2223d"])

[  623.873518] 9pnet: Could not find request transport: f
07:10:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xef86b4d9, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:10:58 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

[  623.922279] cgroup: fork rejected by pids controller in /syz5
07:10:58 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 18)

07:10:58 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

[  624.037830] FAULT_INJECTION: forcing a failure.
[  624.037830] name failslab, interval 1, probability 0, space 0, times 0
[  624.039895] CPU: 0 UID: 0 PID: 7482 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  624.039940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  624.039958] Call Trace:
[  624.039967]  <TASK>
[  624.039977]  dump_stack_lvl+0xfa/0x120
[  624.040016]  should_fail_ex+0x4d7/0x5e0
[  624.040048]  should_failslab+0xc2/0x120
[  624.040082]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  624.040120]  ? v9fs_mount+0x9d/0x9e0
[  624.040150]  ? legacy_get_tree+0x109/0x220
[  624.040183]  ? vfs_get_tree+0x93/0x340
[  624.040213]  ? __x64_sys_mount+0x200/0x300
[  624.040253]  ? v9fs_session_init+0xeb/0x17a0
[  624.040287]  kstrdup+0x3e/0xc0
[  624.040327]  v9fs_session_init+0xeb/0x17a0
[  624.040357]  ? find_held_lock+0x2b/0x80
[  624.040396]  ? __create_object+0x59/0x80
[  624.040428]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  624.040454]  ? __pfx_v9fs_session_init+0x10/0x10
[  624.040481]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  624.040506]  ? __create_object+0x59/0x80
[  624.040538]  ? __kmalloc_cache_noprof+0x369/0x470
[  624.040574]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  624.040628]  v9fs_mount+0xbc/0x9e0
[  624.040661]  ? __pfx_v9fs_mount+0x10/0x10
[  624.040714]  ? cap_capable+0xdb/0x3b0
[  624.040758]  ? __pfx_v9fs_mount+0x10/0x10
[  624.040790]  legacy_get_tree+0x109/0x220
[  624.040828]  vfs_get_tree+0x93/0x340
[  624.040861]  path_mount+0x122f/0x1d70
[  624.040904]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  624.040949]  ? __pfx_path_mount+0x10/0x10
[  624.040991]  ? kmem_cache_free+0x2a1/0x460
[  624.041028]  ? putname.part.0+0x11b/0x160
[  624.041057]  ? getname_flags.part.0+0x1c6/0x540
[  624.041092]  ? putname.part.0+0x11b/0x160
[  624.041126]  __x64_sys_mount+0x27b/0x300
[  624.041169]  ? __pfx___x64_sys_mount+0x10/0x10
[  624.041225]  do_syscall_64+0xbf/0x360
[  624.041260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.041286] RIP: 0033:0x7f0f4d77eb19
[  624.041307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  624.041331] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  624.041355] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  624.041372] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  624.041388] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  624.041403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  624.041418] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
07:10:58 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

[  624.041455]  </TASK>
[  624.110599] 9pnet: Could not find request transport: f�
[  624.144697] 9pnet: Could not find request transport: f�
[  626.550427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  626.554640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  626.558413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  626.563470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  626.567437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  628.648215] Bluetooth: hci0: command tx timeout
[  630.695348] Bluetooth: hci0: command tx timeout
[  632.743309] Bluetooth: hci0: command tx timeout
[  634.792133] Bluetooth: hci0: command tx timeout
[  644.502683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.503840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.571486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.572562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.910727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:11:30 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r5, 0xcf6b, 0x5)

07:11:30 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:11:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:11:30 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 19)

07:11:30 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, &(0x7f00000001c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)=""/20, 0x14)

07:11:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:11:30 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:11:30 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

[  655.665397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  655.706032] 9pnet: Could not find request transport: f
07:11:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:11:30 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 20)

07:11:30 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:11:30 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:11:30 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, &(0x7f0000000300)=""/20, 0x14)

[  655.794409] 9pnet: Could not find request transport: f
[  655.808727] FAULT_INJECTION: forcing a failure.
[  655.808727] name failslab, interval 1, probability 0, space 0, times 0
[  655.809740] CPU: 1 UID: 0 PID: 8042 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  655.809757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  655.809764] Call Trace:
[  655.809769]  <TASK>
[  655.809773]  dump_stack_lvl+0xfa/0x120
[  655.809794]  should_fail_ex+0x4d7/0x5e0
[  655.809810]  should_failslab+0xc2/0x120
[  655.809822]  __kmalloc_cache_noprof+0x73/0x470
[  655.809840]  ? p9_client_create+0xc0/0x11b0
[  655.809858]  ? __pfx_perf_trace_lock+0x10/0x10
[  655.809875]  ? p9_client_create+0xc0/0x11b0
[  655.809892]  p9_client_create+0xc0/0x11b0
[  655.809911]  ? __create_object+0x59/0x80
[  655.809927]  ? __pfx_p9_client_create+0x10/0x10
[  655.809944]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  655.809966]  ? kasan_save_track+0x14/0x30
[  655.809978]  ? __kasan_kmalloc+0x7f/0x90
[  655.809989]  ? trace_kmalloc+0x1f/0xb0
[  655.810000]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[  655.810017]  ? v9fs_mount+0x9d/0x9e0
[  655.810031]  ? legacy_get_tree+0x109/0x220
[  655.810050]  ? vfs_get_tree+0x93/0x340
[  655.810065]  ? lockdep_init_map_type+0x4b/0x240
[  655.810080]  ? __raw_spin_lock_init+0x3a/0x110
[  655.810098]  v9fs_session_init+0x1df/0x17a0
[  655.810112]  ? find_held_lock+0x2b/0x80
[  655.810129]  ? __create_object+0x59/0x80
[  655.810143]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  655.810156]  ? __pfx_v9fs_session_init+0x10/0x10
[  655.810168]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  655.810179]  ? __create_object+0x59/0x80
[  655.810195]  ? __kmalloc_cache_noprof+0x369/0x470
[  655.810211]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  655.810236]  v9fs_mount+0xbc/0x9e0
[  655.810251]  ? __pfx_v9fs_mount+0x10/0x10
[  655.810267]  ? cap_capable+0xdb/0x3b0
[  655.810287]  ? __pfx_v9fs_mount+0x10/0x10
[  655.810301]  legacy_get_tree+0x109/0x220
[  655.810318]  vfs_get_tree+0x93/0x340
[  655.810333]  path_mount+0x122f/0x1d70
[  655.810354]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  655.810373]  ? __pfx_path_mount+0x10/0x10
[  655.810392]  ? kmem_cache_free+0x2a1/0x460
[  655.810409]  ? putname.part.0+0x11b/0x160
[  655.810422]  ? getname_flags.part.0+0x1c6/0x540
[  655.810438]  ? putname.part.0+0x11b/0x160
[  655.810453]  __x64_sys_mount+0x27b/0x300
[  655.810473]  ? __pfx___x64_sys_mount+0x10/0x10
[  655.810498]  do_syscall_64+0xbf/0x360
[  655.810514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.810527] RIP: 0033:0x7f0f4d77eb19
[  655.810536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  655.810547] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  655.810559] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  655.810567] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  655.810574] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  655.810581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  655.810587] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  655.810604]  </TASK>
07:11:30 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

07:11:42 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8000)

07:11:42 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB])

07:11:42 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:11:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:11:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:11:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 21)

07:11:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)

07:11:42 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

[  667.382848] FAULT_INJECTION: forcing a failure.
[  667.382848] name failslab, interval 1, probability 0, space 0, times 0
[  667.384269] CPU: 1 UID: 0 PID: 8068 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  667.384290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  667.384299] Call Trace:
[  667.384305]  <TASK>
[  667.384310]  dump_stack_lvl+0xfa/0x120
[  667.384336]  should_fail_ex+0x4d7/0x5e0
[  667.384356]  should_failslab+0xc2/0x120
[  667.384372]  __kmalloc_cache_noprof+0x73/0x470
[  667.384395]  ? p9_client_create+0xc0/0x11b0
[  667.384419]  ? __pfx_perf_trace_lock+0x10/0x10
[  667.384441]  ? p9_client_create+0xc0/0x11b0
[  667.384463]  p9_client_create+0xc0/0x11b0
[  667.384488]  ? __create_object+0x59/0x80
[  667.384508]  ? __pfx_p9_client_create+0x10/0x10
[  667.384530]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  667.384558]  ? kasan_save_track+0x14/0x30
[  667.384573]  ? __kasan_kmalloc+0x7f/0x90
[  667.384588]  ? trace_kmalloc+0x1f/0xb0
[  667.384603]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[  667.384624]  ? v9fs_mount+0x9d/0x9e0
[  667.384643]  ? legacy_get_tree+0x109/0x220
[  667.384663]  ? vfs_get_tree+0x93/0x340
[  667.384681]  ? lockdep_init_map_type+0x4b/0x240
[  667.384701]  ? __raw_spin_lock_init+0x3a/0x110
[  667.384725]  v9fs_session_init+0x1df/0x17a0
[  667.384743]  ? find_held_lock+0x2b/0x80
[  667.384765]  ? __create_object+0x59/0x80
[  667.384784]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  667.384800]  ? __pfx_v9fs_session_init+0x10/0x10
[  667.384816]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  667.384830]  ? __create_object+0x59/0x80
[  667.384850]  ? __kmalloc_cache_noprof+0x369/0x470
[  667.384871]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  667.384904]  v9fs_mount+0xbc/0x9e0
[  667.384923]  ? __pfx_v9fs_mount+0x10/0x10
[  667.384944]  ? cap_capable+0xdb/0x3b0
[  667.384970]  ? __pfx_v9fs_mount+0x10/0x10
[  667.384989]  legacy_get_tree+0x109/0x220
[  667.385011]  vfs_get_tree+0x93/0x340
[  667.385031]  path_mount+0x122f/0x1d70
[  667.385062]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  667.385088]  ? __pfx_path_mount+0x10/0x10
[  667.385124]  ? kmem_cache_free+0x2a1/0x460
[  667.385146]  ? putname.part.0+0x11b/0x160
[  667.385164]  ? getname_flags.part.0+0x1c6/0x540
[  667.385184]  ? putname.part.0+0x11b/0x160
[  667.385204]  __x64_sys_mount+0x27b/0x300
[  667.385230]  ? __pfx___x64_sys_mount+0x10/0x10
[  667.385263]  do_syscall_64+0xbf/0x360
[  667.385284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.385300] RIP: 0033:0x7f0f4d77eb19
[  667.385312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  667.385326] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  667.385341] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  667.385351] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  667.385360] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  667.385370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  667.385381] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  667.385402]  </TASK>
[  667.449970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:11:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:11:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:11:42 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:11:42 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

07:11:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:11:42 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

07:11:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 22)

07:11:42 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

[  667.647810] FAULT_INJECTION: forcing a failure.
[  667.647810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  667.649970] CPU: 0 UID: 0 PID: 8185 Comm: syz-executor.4 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  667.650002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  667.650015] Call Trace:
[  667.650023]  <TASK>
[  667.650031]  dump_stack_lvl+0xfa/0x120
[  667.650075]  should_fail_ex+0x4d7/0x5e0
[  667.650105]  strncpy_from_user+0x3b/0x2f0
[  667.650143]  path_getxattrat+0xf4/0x2c0
[  667.650181]  ? __pfx_path_getxattrat+0x10/0x10
[  667.650217]  ? lock_release+0xc8/0x290
[  667.650254]  ? perf_trace_run_bpf_submit+0xef/0x180
[  667.650286]  ? perf_trace_run_bpf_submit+0xef/0x180
[  667.650323]  ? perf_trace_preemptirq_template+0x259/0x430
[  667.650366]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  667.650401]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  667.650439]  ? ksys_write+0x1a3/0x240
[  667.650475]  ? __pfx_ksys_write+0x10/0x10
[  667.650522]  do_syscall_64+0xbf/0x360
[  667.650554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.650577] RIP: 0033:0x7fc1c6285b19
[  667.650595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  667.650617] RSP: 002b:00007fc1c37fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf
[  667.650639] RAX: ffffffffffffffda RBX: 00007fc1c6398f60 RCX: 00007fc1c6285b19
[  667.650654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  667.650668] RBP: 00007fc1c37fb1d0 R08: 0000000000000000 R09: 0000000000000000
[  667.650681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.650694] R13: 00007ffe4ab0ad3f R14: 00007fc1c37fb300 R15: 0000000000022000
[  667.650728]  </TASK>
[  667.752956] FAULT_INJECTION: forcing a failure.
[  667.752956] name failslab, interval 1, probability 0, space 0, times 0
[  667.755017] CPU: 0 UID: 0 PID: 8195 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  667.755056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  667.755069] Call Trace:
[  667.755077]  <TASK>
[  667.755085]  dump_stack_lvl+0xfa/0x120
[  667.755121]  should_fail_ex+0x4d7/0x5e0
[  667.755151]  should_failslab+0xc2/0x120
[  667.755174]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  667.755213]  ? p9_client_create+0x487/0x11b0
[  667.755254]  kstrdup+0x3e/0xc0
[  667.755290]  p9_client_create+0x487/0x11b0
[  667.755334]  ? __pfx_p9_client_create+0x10/0x10
[  667.755368]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  667.755410]  ? kasan_save_track+0x14/0x30
[  667.755433]  ? __kasan_kmalloc+0x7f/0x90
[  667.755456]  ? trace_kmalloc+0x1f/0xb0
[  667.755478]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[  667.755511]  ? v9fs_mount+0x9d/0x9e0
[  667.755539]  ? legacy_get_tree+0x109/0x220
[  667.755569]  ? vfs_get_tree+0x93/0x340
[  667.755597]  ? lockdep_init_map_type+0x4b/0x240
[  667.755627]  ? __raw_spin_lock_init+0x3a/0x110
[  667.755663]  v9fs_session_init+0x1df/0x17a0
[  667.755691]  ? find_held_lock+0x2b/0x80
[  667.755725]  ? __create_object+0x59/0x80
[  667.755754]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  667.755778]  ? __pfx_v9fs_session_init+0x10/0x10
[  667.755803]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  667.755825]  ? __create_object+0x59/0x80
[  667.755855]  ? __kmalloc_cache_noprof+0x369/0x470
[  667.755900]  v9fs_mount+0xbc/0x9e0
[  667.755930]  ? __pfx_v9fs_mount+0x10/0x10
[  667.755962]  ? cap_capable+0xdb/0x3b0
[  667.756001]  ? __pfx_v9fs_mount+0x10/0x10
[  667.756030]  legacy_get_tree+0x109/0x220
[  667.756064]  vfs_get_tree+0x93/0x340
[  667.756094]  path_mount+0x122f/0x1d70
[  667.756134]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  667.756173]  ? __pfx_path_mount+0x10/0x10
[  667.756211]  ? kmem_cache_free+0x2a1/0x460
[  667.756245]  ? putname.part.0+0x11b/0x160
[  667.756271]  ? getname_flags.part.0+0x1c6/0x540
[  667.756302]  ? putname.part.0+0x11b/0x160
[  667.756333]  __x64_sys_mount+0x27b/0x300
[  667.756372]  ? __pfx___x64_sys_mount+0x10/0x10
[  667.756422]  do_syscall_64+0xbf/0x360
[  667.756455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.756479] RIP: 0033:0x7f0f4d77eb19
[  667.756497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  667.756518] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  667.756540] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  667.756556] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  667.756570] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  667.756584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  667.756597] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  667.756631]  </TASK>
[  667.792338] 9pnet: Could not find request transport: f�
[  670.128806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  670.132845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  670.135600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  670.140630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  670.144853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  672.231196] Bluetooth: hci0: command tx timeout
[  674.281106] Bluetooth: hci0: command tx timeout
[  676.327213] Bluetooth: hci0: command tx timeout
[  678.375335] Bluetooth: hci0: command tx timeout
[  688.441801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.442911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.523154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.524527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.855389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:12:13 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:12:13 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 23)

07:12:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:12:13 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8000)

07:12:13 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:12:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

07:12:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

07:12:13 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:12:13 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8000)

[  698.647877] FAULT_INJECTION: forcing a failure.
[  698.647877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  698.649816] CPU: 0 UID: 0 PID: 8671 Comm: syz-executor.4 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  698.649845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  698.649858] Call Trace:
[  698.649865]  <TASK>
[  698.649873]  dump_stack_lvl+0xfa/0x120
[  698.649907]  should_fail_ex+0x4d7/0x5e0
[  698.649935]  _copy_to_user+0x32/0xd0
[  698.649967]  simple_read_from_buffer+0xe0/0x180
[  698.650000]  proc_fail_nth_read+0x189/0x270
[  698.650035]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  698.650078]  ? security_file_permission+0x22/0x90
[  698.650104]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  698.650138]  vfs_read+0x1eb/0xbe0
[  698.650177]  ? __pfx_vfs_read+0x10/0x10
[  698.650211]  ? lock_release+0xc8/0x290
[  698.650240]  ? __fget_files+0x20d/0x3b0
[  698.650284]  ksys_read+0x121/0x240
[  698.650316]  ? __pfx_ksys_read+0x10/0x10
[  698.650359]  do_syscall_64+0xbf/0x360
[  698.650389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.650412] RIP: 0033:0x7fc1c623869c
[  698.650428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  698.650448] RSP: 002b:00007fc1c37fb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  698.650469] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc1c623869c
[  698.650483] RDX: 000000000000000f RSI: 00007fc1c37fb1e0 RDI: 0000000000000004
[  698.650496] RBP: 00007fc1c37fb1d0 R08: 0000000000000000 R09: 0000000000000000
[  698.650509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  698.650521] R13: 00007ffe4ab0ad3f R14: 00007fc1c37fb300 R15: 0000000000022000
[  698.650553]  </TASK>
[  698.653073] 9pnet: Could not find request transport: f�
07:12:13 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

[  698.705651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:12:13 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:12:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)

07:12:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

[  698.787963] 9pnet: Could not find request transport: f
07:12:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:12:13 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = creat(0x0, 0x0)
readahead(r3, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r5, 0xcf6b, 0x5)

07:12:13 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8000)

[  698.987551] 9pnet: Could not find request transport: f�
[  701.303627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  701.307005] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  701.309312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  701.315466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  701.322551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  703.335197] Bluetooth: hci0: command tx timeout
[  705.383183] Bluetooth: hci0: command tx timeout
[  707.431269] Bluetooth: hci0: command tx timeout
[  709.479178] Bluetooth: hci0: command tx timeout
[  719.279668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.280762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.366499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.368090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.679904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:12:43 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 24)

07:12:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 1)

07:12:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xf, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:12:43 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x2)

07:12:43 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

07:12:43 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:12:43 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
creat(0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:12:43 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664"])

[  728.652335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:12:43 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)

[  728.684998] FAULT_INJECTION: forcing a failure.
[  728.684998] name failslab, interval 1, probability 0, space 0, times 0
[  728.686861] CPU: 0 UID: 0 PID: 9164 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  728.686893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  728.686906] Call Trace:
[  728.686915]  <TASK>
[  728.686925]  dump_stack_lvl+0xfa/0x120
[  728.686972]  should_fail_ex+0x4d7/0x5e0
[  728.687012]  should_failslab+0xc2/0x120
[  728.687036]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  728.687081]  ? __pfx_match_token+0x10/0x10
[  728.687110]  ? p9_client_create+0x588/0x11b0
[  728.687152]  kmemdup_nul+0x3b/0xa0
[  728.687189]  p9_client_create+0x588/0x11b0
[  728.687232]  ? __pfx_p9_client_create+0x10/0x10
[  728.687266]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  728.687308]  ? kasan_save_track+0x14/0x30
[  728.687330]  ? __kasan_kmalloc+0x7f/0x90
[  728.687353]  ? trace_kmalloc+0x1f/0xb0
[  728.687377]  ? legacy_get_tree+0x109/0x220
[  728.687406]  ? vfs_get_tree+0x93/0x340
[  728.687435]  ? lockdep_init_map_type+0x4b/0x240
[  728.687466]  ? __raw_spin_lock_init+0x3a/0x110
[  728.687502]  v9fs_session_init+0x1df/0x17a0
[  728.687531]  ? find_held_lock+0x2b/0x80
[  728.687565]  ? __create_object+0x59/0x80
[  728.687594]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  728.687617]  ? __pfx_v9fs_session_init+0x10/0x10
[  728.687641]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  728.687664]  ? __create_object+0x59/0x80
[  728.687693]  ? __kmalloc_cache_noprof+0x369/0x470
[  728.687726]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  728.687774]  v9fs_mount+0xbc/0x9e0
[  728.687804]  ? __pfx_v9fs_mount+0x10/0x10
[  728.687836]  ? cap_capable+0xdb/0x3b0
[  728.687874]  ? __pfx_v9fs_mount+0x10/0x10
[  728.687903]  legacy_get_tree+0x109/0x220
[  728.687939]  vfs_get_tree+0x93/0x340
[  728.687983]  path_mount+0x122f/0x1d70
[  728.688024]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  728.688063]  ? __pfx_path_mount+0x10/0x10
[  728.688101]  ? kmem_cache_free+0x2a1/0x460
[  728.688134]  ? putname.part.0+0x11b/0x160
[  728.688160]  ? getname_flags.part.0+0x1c6/0x540
[  728.688191]  ? putname.part.0+0x11b/0x160
[  728.688222]  __x64_sys_mount+0x27b/0x300
[  728.688261]  ? __pfx___x64_sys_mount+0x10/0x10
[  728.688311]  do_syscall_64+0xbf/0x360
[  728.688343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.688367] RIP: 0033:0x7f0f4d77eb19
[  728.688384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  728.688406] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  728.688429] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  728.688444] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  728.688458] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  728.688472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  728.688485] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  728.688519]  </TASK>
[  728.697257] 9pnet: Could not find request transport: f�
07:12:43 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664"])

07:12:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 2)

07:12:43 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)

07:12:43 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x3)

07:12:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:12:43 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 25)

[  728.865234] 9pnet: Could not find request transport: f�
07:12:43 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

[  728.896001] 9pnet: Could not find request transport: f
07:12:43 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c726664"])

07:12:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 3)

[  728.996883] FAULT_INJECTION: forcing a failure.
[  728.996883] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.997910] CPU: 1 UID: 0 PID: 9191 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  728.997926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  728.997933] Call Trace:
[  728.997938]  <TASK>
[  728.997942]  dump_stack_lvl+0xfa/0x120
[  728.997963]  should_fail_ex+0x4d7/0x5e0
[  728.997980]  _copy_from_user+0x30/0xd0
[  728.997998]  memdup_user+0x7e/0xe0
[  728.998017]  strndup_user+0x78/0xe0
[  728.998036]  __x64_sys_mount+0x136/0x300
[  728.998061]  ? __pfx___x64_sys_mount+0x10/0x10
[  728.998086]  do_syscall_64+0xbf/0x360
[  728.998102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.998115] RIP: 0033:0x7f5a62a0ab19
[  728.998124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  728.998135] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  728.998146] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  728.998154] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  728.998161] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  728.998168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.998175] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  728.998192]  </TASK>
[  729.018774] 9pnet: Could not find request transport: f
07:12:43 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)

07:12:43 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

[  729.076484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.110863] 9pnet: Could not find request transport: f�
07:12:53 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x9)

07:12:53 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 26)

07:12:53 executing program 0:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:12:53 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c"])

07:12:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 4)

07:12:53 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:12:53 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)

07:12:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x180, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  738.247271] FAULT_INJECTION: forcing a failure.
07:12:53 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)

[  738.247271] name failslab, interval 1, probability 0, space 0, times 0
[  738.249543] CPU: 0 UID: 0 PID: 9215 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  738.249579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  738.249594] Call Trace:
[  738.249603]  <TASK>
[  738.249613]  dump_stack_lvl+0xfa/0x120
[  738.249653]  should_fail_ex+0x4d7/0x5e0
[  738.249685]  should_failslab+0xc2/0x120
[  738.249711]  __kmalloc_cache_noprof+0x73/0x470
[  738.249744]  ? __might_fault+0xe0/0x190
[  738.249774]  ? copy_mount_options+0x55/0x180
[  738.249810]  ? copy_mount_options+0x55/0x180
[  738.249835]  ? memdup_user+0x95/0xe0
[  738.249887]  copy_mount_options+0x55/0x180
[  738.249916]  __x64_sys_mount+0x1ab/0x300
[  738.249955]  ? __pfx___x64_sys_mount+0x10/0x10
[  738.250005]  do_syscall_64+0xbf/0x360
[  738.250036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.250067] RIP: 0033:0x7f5a62a0ab19
[  738.250084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  738.250106] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  738.250128] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  738.250143] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  738.250157] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  738.250171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  738.250184] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  738.250217]  </TASK>
07:12:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x33fe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  738.285920] 9pnet: Could not find request transport: f�
[  738.288187] FAULT_INJECTION: forcing a failure.
[  738.288187] name failslab, interval 1, probability 0, space 0, times 0
[  738.289958] CPU: 0 UID: 0 PID: 9216 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  738.289988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  738.290001] Call Trace:
[  738.290009]  <TASK>
[  738.290018]  dump_stack_lvl+0xfa/0x120
[  738.290059]  should_fail_ex+0x4d7/0x5e0
[  738.290088]  should_failslab+0xc2/0x120
[  738.290111]  __kmalloc_cache_noprof+0x73/0x470
[  738.290145]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  738.290167]  ? __request_module+0x274/0x630
[  738.290203]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  738.290244]  ? v9fs_get_trans_by_name+0x48/0x70
[  738.290272]  ? __request_module+0x274/0x630
[  738.290308]  __request_module+0x274/0x630
[  738.290346]  ? __pfx___request_module+0x10/0x10
[  738.290396]  ? find_held_lock+0x2b/0x80
[  738.290430]  ? _p9_get_trans_by_name+0xd9/0x110
[  738.290458]  ? lock_release+0xc8/0x290
[  738.290494]  v9fs_get_trans_by_name+0x48/0x70
[  738.290522]  p9_client_create+0x5bb/0x11b0
[  738.290566]  ? __pfx_p9_client_create+0x10/0x10
[  738.290599]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  738.290639]  ? kasan_save_track+0x14/0x30
[  738.290661]  ? __kasan_kmalloc+0x7f/0x90
[  738.290684]  ? trace_kmalloc+0x1f/0xb0
[  738.290707]  ? legacy_get_tree+0x109/0x220
[  738.290736]  ? vfs_get_tree+0x93/0x340
[  738.290765]  ? lockdep_init_map_type+0x4b/0x240
[  738.290792]  ? __raw_spin_lock_init+0x3a/0x110
[  738.290828]  v9fs_session_init+0x1df/0x17a0
[  738.290857]  ? find_held_lock+0x2b/0x80
[  738.290890]  ? __create_object+0x59/0x80
[  738.290919]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  738.290941]  ? __pfx_v9fs_session_init+0x10/0x10
[  738.290965]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  738.290988]  ? __create_object+0x59/0x80
[  738.291017]  ? __kmalloc_cache_noprof+0x369/0x470
[  738.291049]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  738.291097]  v9fs_mount+0xbc/0x9e0
[  738.291127]  ? __pfx_v9fs_mount+0x10/0x10
[  738.291159]  ? cap_capable+0xdb/0x3b0
[  738.291197]  ? __pfx_v9fs_mount+0x10/0x10
[  738.291226]  legacy_get_tree+0x109/0x220
[  738.291260]  vfs_get_tree+0x93/0x340
[  738.291289]  path_mount+0x122f/0x1d70
[  738.291329]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  738.291368]  ? __pfx_path_mount+0x10/0x10
[  738.291405]  ? kmem_cache_free+0x2a1/0x460
[  738.291438]  ? putname.part.0+0x11b/0x160
[  738.291464]  ? getname_flags.part.0+0x1c6/0x540
07:12:53 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c"])

[  738.291495]  ? putname.part.0+0x11b/0x160
[  738.291526]  __x64_sys_mount+0x27b/0x300
[  738.291564]  ? __pfx___x64_sys_mount+0x10/0x10
[  738.291614]  do_syscall_64+0xbf/0x360
[  738.291646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.291669] RIP: 0033:0x7f0f4d77eb19
[  738.291687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  738.291709] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  738.291731] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  738.291746] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  738.291760] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  738.291774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  738.291787] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  738.291820]  </TASK>
[  738.339571] 9pnet: Could not find request transport: f
[  738.372895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  738.460280] 9pnet: Could not find request transport: f�
07:13:01 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:13:01 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e42c"])

07:13:01 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

07:13:01 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 27)

07:13:01 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x10)

07:13:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 5)

07:13:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:01 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r3, 0xcf6b, 0x5)

07:13:01 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r2, 0xcf6b, 0x5)

[  746.735832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  746.741624] 9pnet: Could not find request transport: f
07:13:01 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x300)

07:13:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 6)

07:13:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:01 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

[  746.826021] FAULT_INJECTION: forcing a failure.
[  746.826021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  746.827032] CPU: 1 UID: 0 PID: 9253 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  746.827051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  746.827058] Call Trace:
[  746.827063]  <TASK>
[  746.827067]  dump_stack_lvl+0xfa/0x120
[  746.827088]  should_fail_ex+0x4d7/0x5e0
[  746.827105]  _copy_from_user+0x30/0xd0
[  746.827122]  copy_mount_options+0x76/0x180
[  746.827138]  __x64_sys_mount+0x1ab/0x300
[  746.827158]  ? __pfx___x64_sys_mount+0x10/0x10
[  746.827183]  do_syscall_64+0xbf/0x360
[  746.827199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.827212] RIP: 0033:0x7f5a62a0ab19
[  746.827221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  746.827233] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  746.827244] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  746.827252] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  746.827259] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  746.827266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  746.827273] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  746.827289]  </TASK>
[  746.848284] 9pnet: Could not find request transport: f�
07:13:01 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r2, 0xcf6b, 0x5)

[  746.888228] 9pnet: Could not find request transport: f
07:13:01 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

[  746.968425] 9pnet: Could not find request transport: f
07:13:13 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:13:13 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 7)

07:13:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:13:13 executing program 5:
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

07:13:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x900)

07:13:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0xf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:13 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 28)

07:13:13 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r2, 0xcf6b, 0x5)

[  758.262550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  758.297685] FAULT_INJECTION: forcing a failure.
[  758.297685] name failslab, interval 1, probability 0, space 0, times 0
07:13:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x60ff)

[  758.299583] CPU: 1 UID: 0 PID: 9279 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  758.299613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  758.299626] Call Trace:
[  758.299634]  <TASK>
[  758.299642]  dump_stack_lvl+0xfa/0x120
[  758.299678]  should_fail_ex+0x4d7/0x5e0
[  758.299706]  ? getname_flags.part.0+0x48/0x540
[  758.299733]  should_failslab+0xc2/0x120
[  758.299755]  kmem_cache_alloc_noprof+0x5f/0x470
[  758.299798]  getname_flags.part.0+0x48/0x540
[  758.299827]  getname_flags+0x95/0xe0
[  758.299859]  user_path_at+0x27/0x90
[  758.299893]  __x64_sys_mount+0x1e9/0x300
[  758.299931]  ? __pfx___x64_sys_mount+0x10/0x10
[  758.299978]  do_syscall_64+0xbf/0x360
[  758.300009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.300031] RIP: 0033:0x7f5a62a0ab19
[  758.300055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  758.300083] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  758.300110] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  758.300129] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  758.300143] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  758.300161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.300179] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  758.300212]  </TASK>
[  758.330688] FAULT_INJECTION: forcing a failure.
[  758.330688] name failslab, interval 1, probability 0, space 0, times 0
[  758.332569] CPU: 0 UID: 0 PID: 9280 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  758.332618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  758.332632] Call Trace:
[  758.332639]  <TASK>
[  758.332647]  dump_stack_lvl+0xfa/0x120
[  758.332682]  should_fail_ex+0x4d7/0x5e0
[  758.332710]  should_failslab+0xc2/0x120
[  758.332732]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  758.332765]  ? __kmalloc_cache_noprof+0x369/0x470
[  758.332799]  ? __request_module+0x292/0x630
[  758.332833]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  758.332859]  ? v9fs_get_trans_by_name+0x48/0x70
[  758.332886]  kstrdup+0x3e/0xc0
[  758.332919]  __request_module+0x292/0x630
[  758.332954]  ? __pfx___request_module+0x10/0x10
[  758.333001]  ? find_held_lock+0x2b/0x80
[  758.333033]  ? _p9_get_trans_by_name+0xd9/0x110
[  758.333067]  ? lock_release+0xc8/0x290
[  758.333100]  v9fs_get_trans_by_name+0x48/0x70
[  758.333127]  p9_client_create+0x5bb/0x11b0
[  758.333167]  ? __pfx_p9_client_create+0x10/0x10
[  758.333198]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  758.333237]  ? kasan_save_track+0x14/0x30
[  758.333258]  ? __kasan_kmalloc+0x7f/0x90
[  758.333280]  ? trace_kmalloc+0x1f/0xb0
[  758.333302]  ? legacy_get_tree+0x109/0x220
[  758.333329]  ? vfs_get_tree+0x93/0x340
[  758.333356]  ? lockdep_init_map_type+0x4b/0x240
[  758.333382]  ? __raw_spin_lock_init+0x3a/0x110
[  758.333417]  v9fs_session_init+0x1df/0x17a0
[  758.333445]  ? find_held_lock+0x2b/0x80
[  758.333477]  ? __create_object+0x59/0x80
[  758.333506]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  758.333528]  ? __pfx_v9fs_session_init+0x10/0x10
[  758.333551]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  758.333574]  ? __create_object+0x59/0x80
[  758.333602]  ? __kmalloc_cache_noprof+0x369/0x470
[  758.333645]  v9fs_mount+0xbc/0x9e0
[  758.333674]  ? __pfx_v9fs_mount+0x10/0x10
[  758.333705]  ? cap_capable+0xdb/0x3b0
[  758.333742]  ? __pfx_v9fs_mount+0x10/0x10
[  758.333770]  legacy_get_tree+0x109/0x220
[  758.333805]  vfs_get_tree+0x93/0x340
[  758.333837]  path_mount+0x122f/0x1d70
[  758.333875]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  758.333913]  ? __pfx_path_mount+0x10/0x10
[  758.333950]  ? kmem_cache_free+0x2a1/0x460
[  758.333981]  ? putname.part.0+0x11b/0x160
[  758.334006]  ? getname_flags.part.0+0x1c6/0x540
[  758.334035]  ? putname.part.0+0x11b/0x160
[  758.334081]  __x64_sys_mount+0x27b/0x300
[  758.334117]  ? __pfx___x64_sys_mount+0x10/0x10
[  758.334163]  do_syscall_64+0xbf/0x360
[  758.334194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.334217] RIP: 0033:0x7f0f4d77eb19
[  758.334234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  758.334254] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  758.334274] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  758.334289] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  758.334302] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  758.334315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  758.334327] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  758.334358]  </TASK>
[  758.379720] 9pnet: Could not find request transport: f
07:13:13 executing program 5:
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

07:13:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:13:13 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r2, 0xcf6b, 0x5)

07:13:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xf0ff1f)

07:13:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:13 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 8)

07:13:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans='])

07:13:13 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:13:13 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 29)

07:13:13 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:13:13 executing program 5:
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

07:13:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x1000000)

07:13:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

[  758.775662] 9pnet: Could not find request transport: f
07:13:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x74, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  758.823673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:13:13 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:13:13 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 30)

[  758.883352] 9pnet: Could not find request transport: f
07:13:13 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x2000000)

07:13:13 executing program 5:
r0 = syz_open_procfs(0x0, 0x0)
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)

[  758.979353] FAULT_INJECTION: forcing a failure.
[  758.979353] name failslab, interval 1, probability 0, space 0, times 0
[  758.980834] CPU: 0 UID: 0 PID: 9324 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  758.980858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  758.980868] Call Trace:
[  758.980875]  <TASK>
[  758.980882]  dump_stack_lvl+0xfa/0x120
[  758.980911]  should_fail_ex+0x4d7/0x5e0
[  758.980935]  should_failslab+0xc2/0x120
[  758.980954]  __kmalloc_cache_noprof+0x73/0x470
[  758.980979]  ? kasan_save_track+0x14/0x30
[  758.980997]  ? __kasan_kmalloc+0x7f/0x90
[  758.981012]  ? call_usermodehelper_setup+0xa9/0x330
[  758.981036]  ? trace_kmalloc+0x1f/0xb0
[  758.981062]  ? call_usermodehelper_setup+0xa9/0x330
[  758.981084]  call_usermodehelper_setup+0xa9/0x330
[  758.981105]  ? __pfx_free_modprobe_argv+0x10/0x10
[  758.981135]  ? __asan_memcpy+0x3d/0x60
[  758.981164]  ? v9fs_get_trans_by_name+0x48/0x70
[  758.981185]  __request_module+0x385/0x630
[  758.981215]  ? __pfx___request_module+0x10/0x10
[  758.981253]  ? find_held_lock+0x2b/0x80
[  758.981279]  ? _p9_get_trans_by_name+0xd9/0x110
[  758.981301]  ? lock_release+0xc8/0x290
[  758.981328]  v9fs_get_trans_by_name+0x48/0x70
[  758.981350]  p9_client_create+0x5bb/0x11b0
[  758.981384]  ? __pfx_p9_client_create+0x10/0x10
[  758.981410]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  758.981442]  ? kasan_save_track+0x14/0x30
[  758.981458]  ? __kasan_kmalloc+0x7f/0x90
[  758.981476]  ? trace_kmalloc+0x1f/0xb0
[  758.981494]  ? legacy_get_tree+0x109/0x220
[  758.981517]  ? vfs_get_tree+0x93/0x340
[  758.981539]  ? lockdep_init_map_type+0x4b/0x240
[  758.981560]  ? __raw_spin_lock_init+0x3a/0x110
[  758.981588]  v9fs_session_init+0x1df/0x17a0
[  758.981610]  ? find_held_lock+0x2b/0x80
[  758.981636]  ? __create_object+0x59/0x80
[  758.981659]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  758.981677]  ? __pfx_v9fs_session_init+0x10/0x10
[  758.981695]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  758.981713]  ? __create_object+0x59/0x80
[  758.981735]  ? __kmalloc_cache_noprof+0x369/0x470
[  758.981760]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  758.981798]  v9fs_mount+0xbc/0x9e0
[  758.981821]  ? __pfx_v9fs_mount+0x10/0x10
[  758.981842]  ? __sanitizer_cov_trace_pc+0x57/0x80
[  758.981863]  ? cap_capable+0xdb/0x3b0
[  758.981893]  ? __pfx_v9fs_mount+0x10/0x10
[  758.981915]  legacy_get_tree+0x109/0x220
[  758.981941]  vfs_get_tree+0x93/0x340
[  758.981964]  path_mount+0x122f/0x1d70
[  758.981994]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  758.982024]  ? __pfx_path_mount+0x10/0x10
[  758.982066]  ? kmem_cache_free+0x2a1/0x460
[  758.982092]  ? putname.part.0+0x11b/0x160
[  758.982112]  ? getname_flags.part.0+0x1c6/0x540
[  758.982136]  ? putname.part.0+0x11b/0x160
[  758.982160]  __x64_sys_mount+0x27b/0x300
[  758.982190]  ? __pfx___x64_sys_mount+0x10/0x10
[  758.982228]  do_syscall_64+0xbf/0x360
[  758.982253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.982272] RIP: 0033:0x7f0f4d77eb19
[  758.982286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  758.982303] RSP: 002b:00007f0f4acf4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  758.982320] RAX: ffffffffffffffda RBX: 00007f0f4d891f60 RCX: 00007f0f4d77eb19
[  758.982332] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  758.982342] RBP: 00007f0f4acf41d0 R08: 00000000200009c0 R09: 0000000000000000
[  758.982353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  758.982363] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  758.982389]  </TASK>
[  759.023486] 9pnet: Could not find request transport: f
[  759.035716] 9pnet: Could not find request transport: f�
07:13:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 9)

07:13:30 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 31)

07:13:30 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:13:30 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

07:13:30 executing program 5:
r0 = syz_open_procfs(0x0, 0x0)
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)

07:13:30 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:13:30 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x3000000)

07:13:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  775.729702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  775.740927] FAULT_INJECTION: forcing a failure.
[  775.740927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  775.741888] CPU: 1 UID: 0 PID: 9343 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  775.741903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  775.741910] Call Trace:
[  775.741915]  <TASK>
[  775.741919]  dump_stack_lvl+0xfa/0x120
[  775.741940]  should_fail_ex+0x4d7/0x5e0
[  775.741957]  strncpy_from_user+0x3b/0x2f0
[  775.741977]  getname_flags.part.0+0x8d/0x540
[  775.741995]  getname_flags+0x95/0xe0
[  775.742012]  user_path_at+0x27/0x90
[  775.742030]  __x64_sys_mount+0x1e9/0x300
[  775.742055]  ? __pfx___x64_sys_mount+0x10/0x10
[  775.742080]  do_syscall_64+0xbf/0x360
[  775.742096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.742109] RIP: 0033:0x7f5a62a0ab19
[  775.742118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  775.742129] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  775.742141] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  775.742149] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  775.742156] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  775.742163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  775.742170] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  775.742186]  </TASK>
[  775.769701] 9pnet: Could not find request transport: f
07:13:30 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 32)

[  775.808680] 9pnet: Could not find request transport: f�
07:13:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 10)

07:13:30 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x9000000)

[  775.859188] FAULT_INJECTION: forcing a failure.
[  775.859188] name failslab, interval 1, probability 0, space 0, times 0
[  775.860254] CPU: 1 UID: 0 PID: 9356 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  775.860270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  775.860277] Call Trace:
[  775.860281]  <TASK>
[  775.860286]  dump_stack_lvl+0xfa/0x120
[  775.860307]  should_fail_ex+0x4d7/0x5e0
[  775.860323]  should_failslab+0xc2/0x120
[  775.860336]  __kmalloc_cache_noprof+0x73/0x470
[  775.860352]  ? find_held_lock+0x2b/0x80
[  775.860370]  ? __get_fs_type+0xe6/0x160
[  775.860381]  ? alloc_fs_context+0x58/0x9e0
[  775.860402]  ? alloc_fs_context+0x58/0x9e0
[  775.860417]  ? _raw_read_unlock+0x1e/0x40
[  775.860429]  alloc_fs_context+0x58/0x9e0
[  775.860450]  path_mount+0xab9/0x1d70
[  775.860473]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  775.860494]  ? __pfx_path_mount+0x10/0x10
[  775.860513]  ? kmem_cache_free+0x2a1/0x460
[  775.860530]  ? putname.part.0+0x11b/0x160
[  775.860543]  ? getname_flags.part.0+0x1c6/0x540
[  775.860559]  ? putname.part.0+0x11b/0x160
[  775.860574]  __x64_sys_mount+0x27b/0x300
[  775.860593]  ? __pfx___x64_sys_mount+0x10/0x10
[  775.860612]  ? trace_csd_function_exit+0x134/0x190
[  775.860635]  do_syscall_64+0xbf/0x360
[  775.860652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.860665] RIP: 0033:0x7f5a62a0ab19
[  775.860674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  775.860685] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  775.860696] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  775.860704] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  775.860711] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  775.860718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  775.860724] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  775.860741]  </TASK>
[  775.939502] 9pnet: Could not find request transport: f
[  775.941273] FAULT_INJECTION: forcing a failure.
[  775.941273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  775.943110] CPU: 0 UID: 0 PID: 9359 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  775.943141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  775.943154] Call Trace:
[  775.943162]  <TASK>
[  775.943171]  dump_stack_lvl+0xfa/0x120
[  775.943207]  should_fail_ex+0x4d7/0x5e0
[  775.943236]  _copy_to_user+0x32/0xd0
[  775.943271]  simple_read_from_buffer+0xe0/0x180
[  775.943306]  proc_fail_nth_read+0x189/0x270
[  775.943344]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  775.943382]  ? security_file_permission+0x22/0x90
[  775.943410]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  775.943446]  vfs_read+0x1eb/0xbe0
[  775.943488]  ? __pfx_vfs_read+0x10/0x10
[  775.943524]  ? lock_release+0xc8/0x290
[  775.943556]  ? __fget_files+0x20d/0x3b0
[  775.943603]  ksys_read+0x121/0x240
[  775.943637]  ? __pfx_ksys_read+0x10/0x10
[  775.943684]  do_syscall_64+0xbf/0x360
[  775.943716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.943740] RIP: 0033:0x7f0f4d73169c
[  775.943758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  775.943780] RSP: 002b:00007f0f4acf4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  775.943802] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f0f4d73169c
[  775.943817] RDX: 000000000000000f RSI: 00007f0f4acf41e0 RDI: 0000000000000005
[  775.943831] RBP: 00007f0f4acf41d0 R08: 0000000000000000 R09: 0000000000000000
[  775.943845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  775.943858] R13: 00007ffd9ec2b59f R14: 00007f0f4acf4300 R15: 0000000000022000
[  775.943893]  </TASK>
07:13:41 executing program 6:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:13:41 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:13:41 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:13:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:13:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 11)

07:13:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x10000000)

07:13:41 executing program 5:
r0 = syz_open_procfs(0x0, 0x0)
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)

[  786.870461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:13:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  786.967195] 9pnet: Could not find request transport: f
07:13:41 executing program 6:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:13:41 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x1fffefff)

[  787.056856] 9pnet: Could not find request transport: f
[  787.063220] 9pnet: Could not find request transport: f
07:13:51 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

07:13:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:51 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:13:51 executing program 6:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:13:51 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:13:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 12)

07:13:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x1ffff000)

07:13:51 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  796.881404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  796.888120] FAULT_INJECTION: forcing a failure.
[  796.888120] name failslab, interval 1, probability 0, space 0, times 0
[  796.889777] CPU: 0 UID: 0 PID: 9409 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  796.889806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  796.889818] Call Trace:
[  796.889826]  <TASK>
[  796.889834]  dump_stack_lvl+0xfa/0x120
[  796.889867]  should_fail_ex+0x4d7/0x5e0
[  796.889896]  should_failslab+0xc2/0x120
[  796.889918]  __kmalloc_cache_noprof+0x73/0x470
[  796.889949]  ? __kmalloc_cache_noprof+0x369/0x470
[  796.889977]  ? legacy_init_fs_context+0x44/0xe0
[  796.890014]  ? legacy_init_fs_context+0x44/0xe0
[  796.890049]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  796.890072]  legacy_init_fs_context+0x44/0xe0
[  796.890108]  ? __pfx_legacy_init_fs_context+0x10/0x10
[  796.890138]  alloc_fs_context+0x570/0x9e0
[  796.890175]  path_mount+0xab9/0x1d70
[  796.890212]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  796.890249]  ? __pfx_path_mount+0x10/0x10
[  796.890284]  ? kmem_cache_free+0x2a1/0x460
[  796.890315]  ? putname.part.0+0x11b/0x160
[  796.890340]  ? getname_flags.part.0+0x1c6/0x540
[  796.890369]  ? putname.part.0+0x11b/0x160
[  796.890397]  __x64_sys_mount+0x27b/0x300
[  796.890433]  ? __pfx___x64_sys_mount+0x10/0x10
[  796.890491]  do_syscall_64+0xbf/0x360
[  796.890521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.890544] RIP: 0033:0x7f5a62a0ab19
[  796.890561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  796.890581] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  796.890601] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  796.890615] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  796.890628] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  796.890641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  796.890653] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  796.890685]  </TASK>
07:13:51 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:13:51 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xff600000)

07:13:51 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:13:51 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

[  796.997661] 9pnet: Could not find request transport: f
07:13:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:13:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 13)

07:13:51 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:13:52 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xffefff1f)

07:13:52 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)

07:13:52 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

[  797.305480] 9pnet: Could not find request transport: f
[  797.308453] 9pnet: Could not find request transport: f
07:14:03 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:03 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 14)

07:14:03 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:03 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:14:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x60ffffffffff)

07:14:03 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)

07:14:03 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7472616e733d66e4"])

[  808.777695] FAULT_INJECTION: forcing a failure.
[  808.777695] name failslab, interval 1, probability 0, space 0, times 0
[  808.779766] CPU: 0 UID: 0 PID: 9449 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  808.779799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  808.779813] Call Trace:
[  808.779821]  <TASK>
[  808.779830]  dump_stack_lvl+0xfa/0x120
[  808.779866]  should_fail_ex+0x4d7/0x5e0
[  808.779897]  should_failslab+0xc2/0x120
[  808.779921]  __kmalloc_cache_noprof+0x73/0x470
[  808.779956]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  808.779995]  ? v9fs_mount+0x9d/0x9e0
[  808.780026]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  808.780077]  ? v9fs_mount+0x9d/0x9e0
[  808.780107]  v9fs_mount+0x9d/0x9e0
[  808.780138]  ? __pfx_v9fs_mount+0x10/0x10
[  808.780172]  ? cap_capable+0xdb/0x3b0
[  808.780212]  ? __pfx_v9fs_mount+0x10/0x10
[  808.780243]  legacy_get_tree+0x109/0x220
[  808.780280]  vfs_get_tree+0x93/0x340
[  808.780312]  path_mount+0x122f/0x1d70
07:14:03 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  808.780353]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  808.780396]  ? __pfx_path_mount+0x10/0x10
[  808.780435]  ? kmem_cache_free+0x2a1/0x460
[  808.780471]  ? putname.part.0+0x11b/0x160
[  808.780498]  ? getname_flags.part.0+0x1c6/0x540
[  808.780531]  ? putname.part.0+0x11b/0x160
07:14:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:03 executing program 6:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

[  808.780563]  __x64_sys_mount+0x27b/0x300
[  808.780604]  ? __pfx___x64_sys_mount+0x10/0x10
[  808.780657]  do_syscall_64+0xbf/0x360
[  808.780690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.780715] RIP: 0033:0x7f5a62a0ab19
[  808.780734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  808.780756] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  808.780779] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  808.780795] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  808.780810] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  808.780824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  808.780839] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  808.780878]  </TASK>
[  808.856277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:14:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x7fc1c37dbfff)

07:14:03 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 15)

07:14:03 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)

07:14:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:03 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:03 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x7ffffffff000)

[  809.030144] 9pnet: Could not find request transport: f�
[  809.130377] 9pnet: Could not find request transport: f
07:14:12 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:14:12 executing program 6:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:12 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 16)

07:14:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xf0ff1f00000000)

07:14:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:12 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r3, 0xcf6b, 0x5)

07:14:12 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b)

07:14:12 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  817.668223] FAULT_INJECTION: forcing a failure.
[  817.668223] name failslab, interval 1, probability 0, space 0, times 0
[  817.669377] CPU: 1 UID: 0 PID: 9490 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  817.669397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  817.669406] Call Trace:
[  817.669412]  <TASK>
[  817.669417]  dump_stack_lvl+0xfa/0x120
[  817.669442]  should_fail_ex+0x4d7/0x5e0
[  817.669462]  should_failslab+0xc2/0x120
[  817.669477]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  817.669499]  ? v9fs_mount+0x9d/0x9e0
[  817.669518]  ? legacy_get_tree+0x109/0x220
[  817.669537]  ? vfs_get_tree+0x93/0x340
[  817.669555]  ? path_mount+0x122f/0x1d70
[  817.669577]  ? __x64_sys_mount+0x27b/0x300
[  817.669599]  ? v9fs_session_init+0xaa/0x17a0
[  817.669613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.669633]  kstrdup+0x3e/0xc0
[  817.669656]  v9fs_session_init+0xaa/0x17a0
[  817.669671]  ? do_raw_spin_lock+0x123/0x260
[  817.669693]  ? find_held_lock+0x2b/0x80
[  817.669714]  ? __create_object+0x59/0x80
[  817.669733]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  817.669748]  ? __pfx_v9fs_session_init+0x10/0x10
[  817.669764]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  817.669778]  ? __create_object+0x59/0x80
[  817.669796]  ? __kmalloc_cache_noprof+0x369/0x470
[  817.669817]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  817.669848]  v9fs_mount+0xbc/0x9e0
[  817.669866]  ? __pfx_v9fs_mount+0x10/0x10
[  817.669886]  ? cap_capable+0xdb/0x3b0
[  817.669911]  ? __pfx_v9fs_mount+0x10/0x10
[  817.669929]  legacy_get_tree+0x109/0x220
[  817.669950]  vfs_get_tree+0x93/0x340
[  817.669968]  path_mount+0x122f/0x1d70
[  817.669992]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  817.670018]  ? __pfx_path_mount+0x10/0x10
[  817.670046]  ? kmem_cache_free+0x2a1/0x460
[  817.670067]  ? putname.part.0+0x11b/0x160
[  817.670084]  ? getname_flags.part.0+0x1c6/0x540
[  817.670104]  ? putname.part.0+0x11b/0x160
[  817.670123]  __x64_sys_mount+0x27b/0x300
[  817.670147]  ? __pfx___x64_sys_mount+0x10/0x10
[  817.670178]  do_syscall_64+0xbf/0x360
[  817.670198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.670213] RIP: 0033:0x7f5a62a0ab19
[  817.670224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  817.670238] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  817.670252] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  817.670262] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  817.670271] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  817.670279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  817.670288] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  817.670308]  </TASK>
[  817.682372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:14:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xf0ffffff7f0000)

07:14:12 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, 0x0)
fcntl$notify(r1, 0x402, 0xc000000b)

07:14:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xbe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:12 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x8, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:12 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r3, 0xcf6b, 0x5)

07:14:12 executing program 6:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:12 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 17)

[  817.906860] 9pnet: Could not find request transport: f
[  826.727899] Bluetooth: hci0: command 0x0406 tx timeout
07:14:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:23 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, 0x0)
fcntl$notify(r1, 0x402, 0xc000000b)

07:14:23 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x10, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:23 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:14:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 18)

07:14:23 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r3, 0xcf6b, 0x5)

07:14:23 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x100000000000000)

07:14:23 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

[  829.099733] FAULT_INJECTION: forcing a failure.
[  829.099733] name failslab, interval 1, probability 0, space 0, times 0
[  829.101454] CPU: 0 UID: 0 PID: 9534 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  829.101484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  829.101496] Call Trace:
[  829.101504]  <TASK>
[  829.101512]  dump_stack_lvl+0xfa/0x120
[  829.101546]  should_fail_ex+0x4d7/0x5e0
[  829.101574]  should_failslab+0xc2/0x120
[  829.101596]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  829.101630]  ? v9fs_mount+0x9d/0x9e0
[  829.101656]  ? legacy_get_tree+0x109/0x220
[  829.101684]  ? vfs_get_tree+0x93/0x340
[  829.101711]  ? __x64_sys_mount+0x200/0x300
[  829.101746]  ? v9fs_session_init+0xeb/0x17a0
[  829.101774]  kstrdup+0x3e/0xc0
[  829.101808]  v9fs_session_init+0xeb/0x17a0
[  829.101834]  ? find_held_lock+0x2b/0x80
[  829.101867]  ? __create_object+0x59/0x80
[  829.101895]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  829.101917]  ? __pfx_v9fs_session_init+0x10/0x10
[  829.101940]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  829.101961]  ? __create_object+0x59/0x80
[  829.101989]  ? __kmalloc_cache_noprof+0x369/0x470
[  829.102020]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  829.102072]  v9fs_mount+0xbc/0x9e0
[  829.102100]  ? __pfx_v9fs_mount+0x10/0x10
[  829.102130]  ? cap_capable+0xdb/0x3b0
[  829.102166]  ? __pfx_v9fs_mount+0x10/0x10
[  829.102194]  legacy_get_tree+0x109/0x220
[  829.102226]  vfs_get_tree+0x93/0x340
[  829.102254]  path_mount+0x122f/0x1d70
[  829.102290]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  829.102328]  ? __pfx_path_mount+0x10/0x10
[  829.102364]  ? kmem_cache_free+0x2a1/0x460
[  829.102395]  ? putname.part.0+0x11b/0x160
[  829.102420]  ? getname_flags.part.0+0x1c6/0x540
[  829.102449]  ? putname.part.0+0x11b/0x160
[  829.102478]  __x64_sys_mount+0x27b/0x300
[  829.102515]  ? __pfx___x64_sys_mount+0x10/0x10
[  829.102561]  do_syscall_64+0xbf/0x360
[  829.102592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.102614] RIP: 0033:0x7f5a62a0ab19
[  829.102631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  829.102651] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
07:14:24 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, 0x0)
fcntl$notify(r1, 0x402, 0xc000000b)

[  829.102673] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  829.102687] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  829.102700] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  829.102713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  829.102726] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  829.102757]  </TASK>
[  829.116680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:14:24 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x200000000000000)

07:14:24 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x300, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:24 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

07:14:24 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:24 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)

07:14:24 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 19)

07:14:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:24 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x300000000000000)

[  829.391679] FAULT_INJECTION: forcing a failure.
[  829.391679] name failslab, interval 1, probability 0, space 0, times 0
[  829.393589] CPU: 0 UID: 0 PID: 9552 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  829.393618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  829.393631] Call Trace:
[  829.393638]  <TASK>
[  829.393647]  dump_stack_lvl+0xfa/0x120
[  829.393680]  should_fail_ex+0x4d7/0x5e0
[  829.393709]  should_failslab+0xc2/0x120
[  829.393731]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  829.393762]  ? v9fs_mount+0x9d/0x9e0
[  829.393789]  ? legacy_get_tree+0x109/0x220
[  829.393816]  ? vfs_get_tree+0x93/0x340
[  829.393842]  ? __x64_sys_mount+0x200/0x300
[  829.393876]  ? v9fs_session_init+0xeb/0x17a0
[  829.393904]  kstrdup+0x3e/0xc0
[  829.393937]  v9fs_session_init+0xeb/0x17a0
[  829.393962]  ? find_held_lock+0x2b/0x80
[  829.393995]  ? __create_object+0x59/0x80
[  829.394022]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  829.394051]  ? __pfx_v9fs_session_init+0x10/0x10
[  829.394074]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  829.394095]  ? __create_object+0x59/0x80
[  829.394123]  ? __kmalloc_cache_noprof+0x369/0x470
[  829.394153]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  829.394198]  v9fs_mount+0xbc/0x9e0
[  829.394225]  ? __pfx_v9fs_mount+0x10/0x10
[  829.394255]  ? cap_capable+0xdb/0x3b0
[  829.394291]  ? __pfx_v9fs_mount+0x10/0x10
[  829.394318]  legacy_get_tree+0x109/0x220
[  829.394350]  vfs_get_tree+0x93/0x340
[  829.394378]  path_mount+0x122f/0x1d70
[  829.394414]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  829.394451]  ? __pfx_path_mount+0x10/0x10
[  829.394486]  ? kmem_cache_free+0x2a1/0x460
[  829.394517]  ? putname.part.0+0x11b/0x160
[  829.394541]  ? getname_flags.part.0+0x1c6/0x540
[  829.394570]  ? putname.part.0+0x11b/0x160
[  829.394599]  __x64_sys_mount+0x27b/0x300
[  829.394635]  ? __pfx___x64_sys_mount+0x10/0x10
[  829.394682]  do_syscall_64+0xbf/0x360
[  829.394712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.394738] RIP: 0033:0x7f5a62a0ab19
[  829.394755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  829.394775] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  829.394811] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  829.394825] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  829.394838] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  829.394851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  829.394864] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  829.394895]  </TASK>
07:14:34 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:34 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x500, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:34 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x900000000000000)

07:14:34 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

07:14:34 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)

07:14:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x500, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:34 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 20)

07:14:34 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:14:34 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x600, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:34 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x1000000000000000)

[  840.088802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  840.102302] FAULT_INJECTION: forcing a failure.
[  840.102302] name failslab, interval 1, probability 0, space 0, times 0
[  840.104115] CPU: 0 UID: 0 PID: 9572 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  840.104145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  840.104158] Call Trace:
[  840.104165]  <TASK>
[  840.104173]  dump_stack_lvl+0xfa/0x120
[  840.104207]  should_fail_ex+0x4d7/0x5e0
[  840.104235]  should_failslab+0xc2/0x120
[  840.104257]  __kmalloc_cache_noprof+0x73/0x470
[  840.104290]  ? p9_client_create+0xc0/0x11b0
[  840.104323]  ? __pfx_perf_trace_lock+0x10/0x10
[  840.104352]  ? p9_client_create+0xc0/0x11b0
[  840.104384]  p9_client_create+0xc0/0x11b0
[  840.104420]  ? __create_object+0x59/0x80
[  840.104448]  ? __pfx_p9_client_create+0x10/0x10
[  840.104480]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  840.104519]  ? kasan_save_track+0x14/0x30
[  840.104540]  ? __kasan_kmalloc+0x7f/0x90
[  840.104561]  ? trace_kmalloc+0x1f/0xb0
[  840.104582]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[  840.104613]  ? v9fs_mount+0x9d/0x9e0
[  840.104640]  ? legacy_get_tree+0x109/0x220
[  840.104667]  ? vfs_get_tree+0x93/0x340
[  840.104694]  ? lockdep_init_map_type+0x4b/0x240
[  840.104720]  ? __raw_spin_lock_init+0x3a/0x110
[  840.104754]  v9fs_session_init+0x1df/0x17a0
[  840.104781]  ? find_held_lock+0x2b/0x80
[  840.104812]  ? __create_object+0x59/0x80
[  840.104838]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  840.104861]  ? __pfx_v9fs_session_init+0x10/0x10
[  840.104884]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  840.104905]  ? __create_object+0x59/0x80
[  840.104932]  ? __kmalloc_cache_noprof+0x369/0x470
[  840.104963]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  840.105008]  v9fs_mount+0xbc/0x9e0
[  840.105035]  ? __pfx_v9fs_mount+0x10/0x10
[  840.105073]  ? cap_capable+0xdb/0x3b0
[  840.105109]  ? __pfx_v9fs_mount+0x10/0x10
[  840.105136]  legacy_get_tree+0x109/0x220
[  840.105167]  vfs_get_tree+0x93/0x340
[  840.105195]  path_mount+0x122f/0x1d70
[  840.105233]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  840.105269]  ? __pfx_path_mount+0x10/0x10
[  840.105304]  ? kmem_cache_free+0x2a1/0x460
[  840.105335]  ? putname.part.0+0x11b/0x160
[  840.105360]  ? getname_flags.part.0+0x1c6/0x540
[  840.105389]  ? putname.part.0+0x11b/0x160
[  840.105418]  __x64_sys_mount+0x27b/0x300
[  840.105454]  ? __pfx___x64_sys_mount+0x10/0x10
[  840.105500]  do_syscall_64+0xbf/0x360
[  840.105531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.105553] RIP: 0033:0x7f5a62a0ab19
[  840.105570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  840.105590] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  840.105611] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  840.105625] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  840.105638] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  840.105651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  840.105663] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  840.105694]  </TASK>
07:14:35 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:44 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x700, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:44 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:14:44 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:44 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(0xffffffffffffffff, 0x402, 0xc000000b)

07:14:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x600, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:44 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 21)

07:14:44 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
readahead(0xffffffffffffffff, 0xcf6b, 0x5)

07:14:44 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xffbf7dc3c17f0000)

[  850.170678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:14:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xffefff1f00000000)

07:14:45 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:45 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0x0)

07:14:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:45 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r2, 0xcf6b, 0x5)

07:14:45 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x810, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  850.337454] 9pnet: Could not find request transport: f
07:14:45 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xffffffffff600000)

07:14:45 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:45 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0x0)

07:14:54 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0xffffffffffffffff)

07:14:54 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r2, 0xcf6b, 0x5)

07:14:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 22)

07:14:54 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:14:54 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:14:54 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0x0)

07:14:54 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0xac9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  860.064859] FAULT_INJECTION: forcing a failure.
[  860.064859] name failslab, interval 1, probability 0, space 0, times 0
[  860.065814] CPU: 1 UID: 0 PID: 9633 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  860.065830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  860.065838] Call Trace:
[  860.065842]  <TASK>
[  860.065847]  dump_stack_lvl+0xfa/0x120
[  860.065867]  should_fail_ex+0x4d7/0x5e0
[  860.065883]  should_failslab+0xc2/0x120
[  860.065896]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  860.065916]  ? p9_client_create+0x487/0x11b0
[  860.065937]  kstrdup+0x3e/0xc0
[  860.065955]  p9_client_create+0x487/0x11b0
[  860.065977]  ? __pfx_p9_client_create+0x10/0x10
[  860.065994]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  860.066015]  ? kasan_save_track+0x14/0x30
[  860.066027]  ? __kasan_kmalloc+0x7f/0x90
[  860.066042]  ? trace_kmalloc+0x1f/0xb0
[  860.066053]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[  860.066070]  ? v9fs_mount+0x9d/0x9e0
[  860.066084]  ? legacy_get_tree+0x109/0x220
[  860.066100]  ? vfs_get_tree+0x93/0x340
[  860.066115]  ? lockdep_init_map_type+0x4b/0x240
[  860.066130]  ? __raw_spin_lock_init+0x3a/0x110
[  860.066148]  v9fs_session_init+0x1df/0x17a0
[  860.066160]  ? do_raw_spin_lock+0x123/0x260
[  860.066176]  ? find_held_lock+0x2b/0x80
[  860.066193]  ? __create_object+0x59/0x80
[  860.066208]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  860.066221]  ? __pfx_v9fs_session_init+0x10/0x10
[  860.066233]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  860.066244]  ? __create_object+0x59/0x80
[  860.066259]  ? __kmalloc_cache_noprof+0x369/0x470
[  860.066275]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  860.066300]  v9fs_mount+0xbc/0x9e0
[  860.066315]  ? __pfx_v9fs_mount+0x10/0x10
[  860.066331]  ? cap_capable+0xdb/0x3b0
[  860.066351]  ? __pfx_v9fs_mount+0x10/0x10
[  860.066365]  legacy_get_tree+0x109/0x220
[  860.066382]  vfs_get_tree+0x93/0x340
[  860.066397]  path_mount+0x122f/0x1d70
[  860.066417]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  860.066436]  ? __pfx_path_mount+0x10/0x10
[  860.066455]  ? kmem_cache_free+0x2a1/0x460
[  860.066472]  ? putname.part.0+0x11b/0x160
[  860.066485]  ? getname_flags.part.0+0x1c6/0x540
[  860.066501]  ? putname.part.0+0x11b/0x160
[  860.066516]  __x64_sys_mount+0x27b/0x300
[  860.066536]  ? __pfx___x64_sys_mount+0x10/0x10
[  860.066560]  do_syscall_64+0xbf/0x360
[  860.066577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.066589] RIP: 0033:0x7f5a62a0ab19
[  860.066598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  860.066609] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  860.066620] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  860.066628] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  860.066635] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  860.066642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  860.066649] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  860.066665]  </TASK>
07:14:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  860.122423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:14:55 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 23)

07:14:55 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:14:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xbe00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:55 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003d00)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000100)}, {&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/85, 0x55}, {&(0x7f00000013c0)=""/169, 0xa9}, {&(0x7f0000001480)=""/205, 0xcd}], 0x7, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f00000038c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/49, 0x31}, {&(0x7f0000002800)=""/126, 0x7e}, {&(0x7f0000002880)}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003940)=""/29, 0x1d}, {&(0x7f0000003980)=""/78, 0x4e}, {&(0x7f0000003a00)=""/59, 0x3b}, {&(0x7f0000003a40)=""/246, 0xf6}, {&(0x7f0000003b40)=""/35, 0x23}], 0x5, &(0x7f0000003c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}], 0x3, 0x2000, &(0x7f0000003dc0))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000003e00), 0xd0042, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x2, 0x30, 0x0, 0x0, 0x1, 0x1800, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x23a, 0x0, @perf_config_ext={0x7, 0x6}, 0x2824, 0x7f8, 0x6, 0x3, 0x2, 0x100000, 0x576, 0x0, 0x20, 0x0, 0x81}, r1, 0xd, r2, 0x2)
getxattr(0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002880)={&(0x7f0000003e40)=@tipc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/227, 0xe3}], 0x2}, 0x10100)

07:14:55 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r3, 0xcf6b, 0x5)

07:14:55 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:55 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x1008, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  860.276280] 9pnet: Could not find request transport: f
07:14:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:55 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 24)

[  860.353905] FAULT_INJECTION: forcing a failure.
[  860.353905] name failslab, interval 1, probability 0, space 0, times 0
[  860.354874] CPU: 1 UID: 0 PID: 9669 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  860.354890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  860.354897] Call Trace:
[  860.354901]  <TASK>
[  860.354905]  dump_stack_lvl+0xfa/0x120
[  860.354926]  should_fail_ex+0x4d7/0x5e0
[  860.354942]  should_failslab+0xc2/0x120
[  860.354954]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  860.354974]  ? __pfx_match_token+0x10/0x10
[  860.354989]  ? p9_client_create+0x588/0x11b0
[  860.355011]  kmemdup_nul+0x3b/0xa0
[  860.355030]  p9_client_create+0x588/0x11b0
[  860.355056]  ? __pfx_p9_client_create+0x10/0x10
[  860.355073]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  860.355108]  ? kasan_save_track+0x14/0x30
[  860.355120]  ? __kasan_kmalloc+0x7f/0x90
[  860.355131]  ? trace_kmalloc+0x1f/0xb0
[  860.355144]  ? legacy_get_tree+0x109/0x220
[  860.355159]  ? vfs_get_tree+0x93/0x340
[  860.355174]  ? lockdep_init_map_type+0x4b/0x240
[  860.355189]  ? __raw_spin_lock_init+0x3a/0x110
[  860.355208]  v9fs_session_init+0x1df/0x17a0
[  860.355221]  ? do_raw_spin_lock+0x123/0x260
[  860.355237]  ? find_held_lock+0x2b/0x80
[  860.355253]  ? __create_object+0x59/0x80
[  860.355269]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  860.355282]  ? __pfx_v9fs_session_init+0x10/0x10
[  860.355294]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  860.355305]  ? __create_object+0x59/0x80
[  860.355320]  ? __kmalloc_cache_noprof+0x369/0x470
[  860.355336]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  860.355362]  v9fs_mount+0xbc/0x9e0
[  860.355377]  ? __pfx_v9fs_mount+0x10/0x10
[  860.355393]  ? cap_capable+0xdb/0x3b0
[  860.355413]  ? __pfx_v9fs_mount+0x10/0x10
[  860.355428]  legacy_get_tree+0x109/0x220
[  860.355444]  vfs_get_tree+0x93/0x340
[  860.355460]  path_mount+0x122f/0x1d70
[  860.355480]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  860.355499]  ? __pfx_path_mount+0x10/0x10
[  860.355518]  ? kmem_cache_free+0x2a1/0x460
[  860.355535]  ? putname.part.0+0x11b/0x160
[  860.355548]  ? getname_flags.part.0+0x1c6/0x540
[  860.355564]  ? putname.part.0+0x11b/0x160
[  860.355579]  __x64_sys_mount+0x27b/0x300
[  860.355598]  ? __pfx___x64_sys_mount+0x10/0x10
[  860.355623]  do_syscall_64+0xbf/0x360
[  860.355640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.355653] RIP: 0033:0x7f5a62a0ab19
[  860.355662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  860.355673] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  860.355684] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  860.355692] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  860.355699] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  860.355706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  860.355713] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  860.355730]  </TASK>
07:14:55 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = getpgid(0x0)
r3 = fork()
kcmp(r3, r2, 0x0, r1, r1)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x31, 0xff, 0x9d, 0x1d, 0x0, 0x41c, 0x80000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x20620, 0x5, 0x800, 0x0, 0x100000001, 0x80, 0xfa7, 0x0, 0xffff, 0x0, 0x1}, r3, 0x4, r0, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xe4\x00')

07:14:55 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:14:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:14:55 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:14:55 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:14:55 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x1020, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:14:55 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 25)

[  860.539898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  860.626712] 9pnet: Could not find request transport: f
07:15:04 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r2, 0xcf6b, 0x5)

07:15:04 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:15:04 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:15:04 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x2000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:15:04 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:15:04 executing program 4:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752, 0x0, @perf_bp={0x0, 0xa}, 0x800, 0x0, 0x5, 0x9, 0xc5, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x4)
getxattr(0x0, 0x0, 0x0, 0x0)

07:15:04 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 26)

07:15:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x34000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  869.459461] FAULT_INJECTION: forcing a failure.
[  869.459461] name failslab, interval 1, probability 0, space 0, times 0
[  869.460491] CPU: 1 UID: 0 PID: 9702 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  869.460507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  869.460514] Call Trace:
[  869.460519]  <TASK>
[  869.460523]  dump_stack_lvl+0xfa/0x120
[  869.460543]  should_fail_ex+0x4d7/0x5e0
[  869.460560]  should_failslab+0xc2/0x120
[  869.460572]  __kmalloc_cache_noprof+0x73/0x470
[  869.460590]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  869.460602]  ? __request_module+0x274/0x630
[  869.460621]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  869.460643]  ? v9fs_get_trans_by_name+0x48/0x70
[  869.460658]  ? __request_module+0x274/0x630
[  869.460676]  __request_module+0x274/0x630
[  869.460695]  ? __pfx___request_module+0x10/0x10
[  869.460720]  ? find_held_lock+0x2b/0x80
[  869.460738]  ? _p9_get_trans_by_name+0xd9/0x110
[  869.460752]  ? lock_release+0xc8/0x290
[  869.460770]  v9fs_get_trans_by_name+0x48/0x70
[  869.460785]  p9_client_create+0x5bb/0x11b0
[  869.460807]  ? __pfx_p9_client_create+0x10/0x10
[  869.460824]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  869.460844]  ? kasan_save_track+0x14/0x30
[  869.460855]  ? __kasan_kmalloc+0x7f/0x90
[  869.460867]  ? trace_kmalloc+0x1f/0xb0
[  869.460879]  ? legacy_get_tree+0x109/0x220
[  869.460894]  ? vfs_get_tree+0x93/0x340
[  869.460910]  ? lockdep_init_map_type+0x4b/0x240
[  869.460923]  ? __raw_spin_lock_init+0x3a/0x110
[  869.460941]  v9fs_session_init+0x1df/0x17a0
[  869.460955]  ? do_raw_spin_lock+0x123/0x260
[  869.460970]  ? find_held_lock+0x2b/0x80
[  869.460987]  ? __create_object+0x59/0x80
[  869.461002]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  869.461013]  ? __pfx_v9fs_session_init+0x10/0x10
[  869.461026]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  869.461041]  ? __create_object+0x59/0x80
[  869.461056]  ? __kmalloc_cache_noprof+0x369/0x470
[  869.461072]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  869.461097]  v9fs_mount+0xbc/0x9e0
[  869.461112]  ? __pfx_v9fs_mount+0x10/0x10
[  869.461128]  ? cap_capable+0xdb/0x3b0
[  869.461148]  ? __pfx_v9fs_mount+0x10/0x10
[  869.461163]  legacy_get_tree+0x109/0x220
[  869.461180]  vfs_get_tree+0x93/0x340
[  869.461195]  path_mount+0x122f/0x1d70
[  869.461215]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  869.461237]  ? __pfx_path_mount+0x10/0x10
[  869.461258]  ? kmem_cache_free+0x2a1/0x460
[  869.461275]  ? putname.part.0+0x11b/0x160
[  869.461288]  ? getname_flags.part.0+0x1c6/0x540
[  869.461304]  ? putname.part.0+0x11b/0x160
[  869.461319]  __x64_sys_mount+0x27b/0x300
[  869.461339]  ? __pfx___x64_sys_mount+0x10/0x10
[  869.461364]  do_syscall_64+0xbf/0x360
[  869.461381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  869.461393] RIP: 0033:0x7f5a62a0ab19
[  869.461402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  869.461414] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  869.461425] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  869.461433] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  869.461440] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  869.461447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  869.461453] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  869.461470]  </TASK>
[  869.486718] 9pnet: Could not find request transport: f
[  869.495729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:15:14 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:15:14 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000001c0)={0xbca, 0xfff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

07:15:14 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:15:14 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
perf_event_open(&(0x7f0000000040)={0xdc08605e44737f6d, 0x80, 0x49, 0x75, 0x4, 0x2, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xff, 0x7, 0x6, 0x4, 0x3, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x48be58a43a393b4d)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x33f}, {0xe000000, 0x2}]}, 0x14, 0x3)
readahead(r1, 0x0, 0x0)
readahead(r1, 0x0, 0x0)
creat(0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r4, 0xcf6b, 0x5)

07:15:14 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 27)

07:15:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:15:14 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:15:14 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x2010, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  879.254353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  879.258800] 9pnet: Could not find request transport: f
07:15:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b) (fail_nth: 1)

07:15:14 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 28)

07:15:14 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x4840, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:15:14 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x4000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:15:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:15:14 executing program 7:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

[  879.354032] FAULT_INJECTION: forcing a failure.
[  879.354032] name failslab, interval 1, probability 0, space 0, times 0
[  879.355423] CPU: 1 UID: 0 PID: 9733 Comm: syz-executor.5 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  879.355440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  879.355447] Call Trace:
[  879.355451]  <TASK>
[  879.355455]  dump_stack_lvl+0xfa/0x120
[  879.355474]  should_fail_ex+0x4d7/0x5e0
[  879.355489]  ? fcntl_dirnotify+0x245/0xb50
[  879.355506]  should_failslab+0xc2/0x120
[  879.355518]  kmem_cache_alloc_noprof+0x5f/0x470
[  879.355541]  fcntl_dirnotify+0x245/0xb50
[  879.355559]  ? lock_acquire+0x15e/0x2f0
[  879.355574]  do_fcntl+0xf2d/0x1430
[  879.355588]  ? __pfx_do_fcntl+0x10/0x10
[  879.355601]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  879.355616]  ? selinux_file_fcntl+0x92/0x170
[  879.355635]  __x64_sys_fcntl+0x155/0x1f0
[  879.355649]  do_syscall_64+0xbf/0x360
[  879.355665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.355677] RIP: 0033:0x7f4da8353b19
[  879.355686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  879.355697] RSP: 002b:00007f4da58c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  879.355709] RAX: ffffffffffffffda RBX: 00007f4da8466f60 RCX: 00007f4da8353b19
[  879.355716] RDX: 00000000c000000b RSI: 0000000000000402 RDI: 0000000000000004
[  879.355724] RBP: 00007f4da58c91d0 R08: 0000000000000000 R09: 0000000000000000
[  879.355730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  879.355737] R13: 00007fff7a86f8ef R14: 00007f4da58c9300 R15: 0000000000022000
[  879.355754]  </TASK>
07:15:14 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)

[  879.396828] FAULT_INJECTION: forcing a failure.
[  879.396828] name failslab, interval 1, probability 0, space 0, times 0
[  879.398491] CPU: 0 UID: 0 PID: 9735 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  879.398524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  879.398537] Call Trace:
[  879.398545]  <TASK>
[  879.398553]  dump_stack_lvl+0xfa/0x120
[  879.398589]  should_fail_ex+0x4d7/0x5e0
[  879.398618]  should_failslab+0xc2/0x120
[  879.398641]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[  879.398680]  ? __kmalloc_cache_noprof+0x369/0x470
[  879.398711]  ? __request_module+0x292/0x630
[  879.398745]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  879.398772]  ? v9fs_get_trans_by_name+0x48/0x70
[  879.398800]  kstrdup+0x3e/0xc0
[  879.398834]  __request_module+0x292/0x630
[  879.398869]  ? __pfx___request_module+0x10/0x10
[  879.398916]  ? find_held_lock+0x2b/0x80
[  879.398949]  ? _p9_get_trans_by_name+0xd9/0x110
[  879.398975]  ? lock_release+0xc8/0x290
[  879.399009]  v9fs_get_trans_by_name+0x48/0x70
[  879.399036]  p9_client_create+0x5bb/0x11b0
[  879.399083]  ? __pfx_p9_client_create+0x10/0x10
[  879.399114]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  879.399154]  ? kasan_save_track+0x14/0x30
[  879.399176]  ? __kasan_kmalloc+0x7f/0x90
[  879.399197]  ? trace_kmalloc+0x1f/0xb0
[  879.399219]  ? legacy_get_tree+0x109/0x220
[  879.399249]  ? vfs_get_tree+0x93/0x340
[  879.399278]  ? lockdep_init_map_type+0x4b/0x240
[  879.399317]  ? __raw_spin_lock_init+0x3a/0x110
[  879.399352]  v9fs_session_init+0x1df/0x17a0
[  879.399380]  ? find_held_lock+0x2b/0x80
[  879.399411]  ? __create_object+0x59/0x80
[  879.399439]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  879.399461]  ? __pfx_v9fs_session_init+0x10/0x10
[  879.399483]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  879.399505]  ? __create_object+0x59/0x80
[  879.399532]  ? __kmalloc_cache_noprof+0x369/0x470
[  879.399563]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  879.399611]  v9fs_mount+0xbc/0x9e0
[  879.399640]  ? __pfx_v9fs_mount+0x10/0x10
[  879.399670]  ? cap_capable+0xdb/0x3b0
[  879.399707]  ? __pfx_v9fs_mount+0x10/0x10
[  879.399734]  legacy_get_tree+0x109/0x220
[  879.399766]  vfs_get_tree+0x93/0x340
[  879.399794]  path_mount+0x122f/0x1d70
[  879.399832]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  879.399868]  ? __pfx_path_mount+0x10/0x10
[  879.399904]  ? kmem_cache_free+0x2a1/0x460
[  879.399935]  ? putname.part.0+0x11b/0x160
[  879.399961]  ? getname_flags.part.0+0x1c6/0x540
[  879.399990]  ? putname.part.0+0x11b/0x160
[  879.400019]  __x64_sys_mount+0x27b/0x300
[  879.400055]  ? __pfx___x64_sys_mount+0x10/0x10
[  879.400102]  do_syscall_64+0xbf/0x360
[  879.400133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.400156] RIP: 0033:0x7f5a62a0ab19
[  879.400173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  879.400194] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  879.400215] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  879.400230] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  879.400243] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  879.400256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  879.400269] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  879.400300]  </TASK>
[  879.444530] 9pnet: Could not find request transport: f
07:15:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b) (fail_nth: 2)

07:15:14 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0xc90a, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:15:22 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:15:22 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:15:22 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b) (fail_nth: 3)

07:15:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 29)

07:15:22 executing program 4:
getxattr(0x0, 0x0, 0x0, 0x0)

07:15:22 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0xedc0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:15:22 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:15:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:15:22 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x80000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

[  887.927694] FAULT_INJECTION: forcing a failure.
[  887.927694] name failslab, interval 1, probability 0, space 0, times 0
[  887.928659] CPU: 1 UID: 0 PID: 9766 Comm: syz-executor.5 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  887.928675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  887.928682] Call Trace:
[  887.928686]  <TASK>
[  887.928691]  dump_stack_lvl+0xfa/0x120
[  887.928711]  should_fail_ex+0x4d7/0x5e0
[  887.928727]  ? fcntl_dirnotify+0x267/0xb50
[  887.928744]  should_failslab+0xc2/0x120
[  887.928757]  kmem_cache_alloc_noprof+0x5f/0x470
[  887.928779]  fcntl_dirnotify+0x267/0xb50
[  887.928797]  ? lock_acquire+0x15e/0x2f0
[  887.928813]  do_fcntl+0xf2d/0x1430
[  887.928827]  ? __pfx_do_fcntl+0x10/0x10
[  887.928841]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  887.928856]  ? selinux_file_fcntl+0x92/0x170
[  887.928875]  __x64_sys_fcntl+0x155/0x1f0
[  887.928889]  do_syscall_64+0xbf/0x360
[  887.928905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.928918] RIP: 0033:0x7f4da8353b19
[  887.928927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  887.928938] RSP: 002b:00007f4da58c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  887.928950] RAX: ffffffffffffffda RBX: 00007f4da8466f60 RCX: 00007f4da8353b19
[  887.928957] RDX: 00000000c000000b RSI: 0000000000000402 RDI: 0000000000000004
[  887.928964] RBP: 00007f4da58c91d0 R08: 0000000000000000 R09: 0000000000000000
[  887.928971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  887.928978] R13: 00007fff7a86f8ef R14: 00007f4da58c9300 R15: 0000000000022000
[  887.928994]  </TASK>
[  887.954639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  887.955205] 9pnet: Could not find request transport: f
07:15:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 30)

07:15:22 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b) (fail_nth: 4)

07:15:22 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:15:22 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0xe0ffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:15:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xf9, 0xff, 0x6, 0x1f, 0x0, 0x2, 0x5063bf0754c373c1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0xc72cab1a7ad59b2a, @perf_config_ext={0xfffffffffffff90d}, 0x431, 0xfcd, 0x1f, 0x0, 0x0, 0x5, 0x3, 0x0, 0x8, 0x0, 0x77}, 0x0, 0x2, 0xffffffffffffffff, 0xb)

[  888.046090] FAULT_INJECTION: forcing a failure.
[  888.046090] name failslab, interval 1, probability 0, space 0, times 0
[  888.047022] CPU: 1 UID: 0 PID: 9777 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  888.047041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  888.047049] Call Trace:
[  888.047053]  <TASK>
[  888.047058]  dump_stack_lvl+0xfa/0x120
[  888.047078]  should_fail_ex+0x4d7/0x5e0
[  888.047094]  should_failslab+0xc2/0x120
[  888.047107]  __kmalloc_cache_noprof+0x73/0x470
[  888.047123]  ? kasan_save_track+0x14/0x30
[  888.047136]  ? __kasan_kmalloc+0x7f/0x90
[  888.047146]  ? call_usermodehelper_setup+0xa9/0x330
[  888.047161]  ? trace_kmalloc+0x1f/0xb0
[  888.047175]  ? call_usermodehelper_setup+0xa9/0x330
[  888.047189]  call_usermodehelper_setup+0xa9/0x330
[  888.047203]  ? __pfx_free_modprobe_argv+0x10/0x10
[  888.047223]  ? __asan_memcpy+0x3d/0x60
[  888.047243]  ? v9fs_get_trans_by_name+0x48/0x70
[  888.047257]  __request_module+0x385/0x630
[  888.047276]  ? __pfx___request_module+0x10/0x10
[  888.047301]  ? find_held_lock+0x2b/0x80
[  888.047319]  ? _p9_get_trans_by_name+0xd9/0x110
[  888.047333]  ? lock_release+0xc8/0x290
[  888.047350]  v9fs_get_trans_by_name+0x48/0x70
[  888.047365]  p9_client_create+0x5bb/0x11b0
[  888.047394]  ? __pfx_p9_client_create+0x10/0x10
[  888.047411]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  888.047432]  ? kasan_save_track+0x14/0x30
[  888.047443]  ? __kasan_kmalloc+0x7f/0x90
[  888.047455]  ? trace_kmalloc+0x1f/0xb0
[  888.047467]  ? legacy_get_tree+0x109/0x220
[  888.047482]  ? vfs_get_tree+0x93/0x340
[  888.047497]  ? lockdep_init_map_type+0x4b/0x240
[  888.047511]  ? __raw_spin_lock_init+0x3a/0x110
[  888.047529]  v9fs_session_init+0x1df/0x17a0
[  888.047542]  ? do_raw_spin_lock+0x123/0x260
[  888.047558]  ? find_held_lock+0x2b/0x80
[  888.047575]  ? __create_object+0x59/0x80
[  888.047590]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  888.047603]  ? __pfx_v9fs_session_init+0x10/0x10
[  888.047615]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  888.047626]  ? __create_object+0x59/0x80
[  888.047641]  ? __kmalloc_cache_noprof+0x369/0x470
[  888.047657]  ? cred_has_capability.isra.0+0x1be/0x2c0
[  888.047682]  v9fs_mount+0xbc/0x9e0
[  888.047698]  ? __pfx_v9fs_mount+0x10/0x10
[  888.047714]  ? cap_capable+0xdb/0x3b0
[  888.047733]  ? __pfx_v9fs_mount+0x10/0x10
[  888.047748]  legacy_get_tree+0x109/0x220
[  888.047765]  vfs_get_tree+0x93/0x340
[  888.047779]  path_mount+0x122f/0x1d70
[  888.047799]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  888.047819]  ? __pfx_path_mount+0x10/0x10
[  888.047838]  ? kmem_cache_free+0x2a1/0x460
[  888.047855]  ? putname.part.0+0x11b/0x160
[  888.047868]  ? getname_flags.part.0+0x1c6/0x540
[  888.047883]  ? putname.part.0+0x11b/0x160
[  888.047899]  __x64_sys_mount+0x27b/0x300
[  888.047918]  ? __pfx___x64_sys_mount+0x10/0x10
[  888.047943]  do_syscall_64+0xbf/0x360
[  888.047959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.047972] RIP: 0033:0x7f5a62a0ab19
[  888.047981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  888.047992] RSP: 002b:00007f5a5ff80188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  888.048004] RAX: ffffffffffffffda RBX: 00007f5a62b1df60 RCX: 00007f5a62a0ab19
[  888.048012] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000000000000
[  888.048019] RBP: 00007f5a5ff801d0 R08: 00000000200009c0 R09: 0000000000000000
[  888.048026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  888.048032] R13: 00007ffefc7339cf R14: 00007f5a5ff80300 R15: 0000000000022000
[  888.048049]  </TASK>
[  888.074842] 9pnet: Could not find request transport: f
07:15:22 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:15:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:15:23 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpgid(0x0)
r2 = fork()
kcmp(r2, r1, 0x0, r0, r0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, @perf_bp={0x0}, 0x51000, 0x0, 0xfffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)

07:15:31 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f']) (fail_nth: 31)

07:15:31 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
readahead(r1, 0xcf6b, 0x5)

07:15:31 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000001980)=@device_b, &(0x7f00000019c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x72fd}, @device_b, @device_b, @initial, {0x3, 0xed3}}, {0x6, 0x0, 0x2, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @random="7a93befc8ca5", {0xf, 0x7}, @broadcast}, {0xf}}}, @a_msdu=[{@broadcast, @device_a, 0x58, "35be2b59f7bd2b265e1790e08b67b7e78620588af898d74914076b21148715888509931e8f5c0fe4d4a8024a2b2a9f18c47581b8618481b115972a75d6e7e1894a1f7b8312630ba63d785ee3417b38b0b8b0d708ca99d855"}, {@device_a, @device_a, 0xc7, "230073e43dc609617b9dd325205cf6e4ff377781ab936b8ca2798e3086167fa375b6cbdf6b3229d5b164989e372de33a7b907bedc9822677302a45a884445f9752e3905511a7e595ea7bd24e5d2b3d1f4777d174d263548269a22890b30de105f753994d0f9098457f1072d18745583bd4269d9360664fdcd84397e5fdbc6a369c457b43954979d615e424449403cdf2ce02aed2b0561177c155341405d7778e9a8d984522a89f0dda2ca6c943ee5433d1cad1f1f32f9548565566bc842ec5cbf02bb3e57baf8d"}, {@device_b, @device_a, 0x9, "c78540804568590c0e"}, {@device_a, @device_a, 0x9b, "37f78272eec9fd2a4788a76cd6acec87838d1167d026817ca58ed7263a6c3ecea060f1611f3bd6a04f4f2fd6a98db352d68f766a5516cd3719905018d4fb6e911b57cd63d6e087ac9cc7568c8eaaad96d4820387264e671092dbd0171af18f1a22ba41791885ee84bb66fb37fdf79419867795d78984d3b9c1659927893c1775bd4989be85806586df7c8780e65987dfc6f7f56d6ec4be9d9da15d"}, {@device_a, @device_b, 0xf3, "57139f2c50e5fada2e49c2c64eda42344a92a8c99b0225c00ec8ecb5e864c29bff40e875407c015cdde5dddeca043ea62247cdd359434035874b7e77d828b3090524da23a2799c51c5209feff194e08064537c0e7f8a0593cfbd12415da46ed54cd94b1406532be446a9e5b6662e59af0ce6fd1b571181f22e2d19375dece1ab139102592f2fa769075190e70ce465c5358ccb875079b01c61080737b5f60217acebadd88a72c038e2be2f19d6226819fded2b3ca10cd82bb3d63cdf1b010f620e1b5633181e51c43ef773651b369574a27d2e607ff177683000f316b4e8d4005eb35fcd47b65e4cf7ba3449d6ed929e931390"}]}, 0x342)

07:15:31 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)

07:15:31 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x1000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:15:31 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:15:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:15:31 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b) (fail_nth: 5)

[  896.896321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
07:15:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  896.916466] FAULT_INJECTION: forcing a failure.
[  896.916466] name failslab, interval 1, probability 0, space 0, times 0
[  896.917471] CPU: 1 UID: 0 PID: 9816 Comm: syz-executor.5 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[  896.917486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  896.917494] Call Trace:
[  896.917498]  <TASK>
[  896.917502]  dump_stack_lvl+0xfa/0x120
[  896.917523]  should_fail_ex+0x4d7/0x5e0
[  896.917539]  should_failslab+0xc2/0x120
[  896.917551]  __kmalloc_cache_noprof+0x73/0x470
[  896.917568]  ? __create_object+0x59/0x80
[  896.917582]  ? file_f_owner_allocate.part.0+0x40/0xf0
[  896.917599]  ? file_f_owner_allocate.part.0+0x40/0xf0
[  896.917611]  file_f_owner_allocate.part.0+0x40/0xf0
[  896.917624]  file_f_owner_allocate+0x53/0x70
[  896.917636]  fcntl_dirnotify+0x280/0xb50
[  896.917659]  do_fcntl+0xf2d/0x1430
[  896.917672]  ? __pfx_do_fcntl+0x10/0x10
[  896.917686]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  896.917701]  ? selinux_file_fcntl+0x92/0x170
[  896.917721]  __x64_sys_fcntl+0x155/0x1f0
[  896.917735]  do_syscall_64+0xbf/0x360
[  896.917751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.917764] RIP: 0033:0x7f4da8353b19
[  896.917773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  896.917784] RSP: 002b:00007f4da58c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  896.917796] RAX: ffffffffffffffda RBX: 00007f4da8466f60 RCX: 00007f4da8353b19
[  896.917804] RDX: 00000000c000000b RSI: 0000000000000402 RDI: 0000000000000004
[  896.917811] RBP: 00007f4da58c91d0 R08: 0000000000000000 R09: 0000000000000000
[  896.917817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  896.917824] R13: 00007fff7a86f8ef R14: 00007f4da58c9300 R15: 0000000000022000
[  896.917841]  </TASK>
07:15:31 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r0, 0x402, 0xc000000b)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0xc000000b) (fail_nth: 6)

07:15:31 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
readahead(r0, 0xcf6b, 0x5)

07:15:31 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$9p_fd(0x2000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=f'])

07:15:31 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
dup2(r0, r1)
getxattr(0x0, 0x0, 0x0, 0x0)

[  897.066381] 9pnet: Could not find request transport: f
[  906.061663] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff88800d2d3960 (size 136):
  comm "syz-executor.5", pid 9816, jiffies 4295563821
  hex dump (first 32 bytes):
    b8 4b ee 34 80 88 ff ff 84 00 00 00 92 01 20 06  .K.4.......... .
    70 39 2d 0d 80 88 ff ff 70 39 2d 0d 80 88 ff ff  p9-.....p9-.....
  backtrace (crc c872a0fc):
    kmem_cache_alloc_noprof+0x397/0x470
    fcntl_dirnotify+0x267/0xb50
    do_fcntl+0xf2d/0x1430
    __x64_sys_fcntl+0x155/0x1f0
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: leak checking failed

VM DIAGNOSIS:
07:15:47  Registers:
info registers vcpu 0
RAX=ffff88800c93d758 RBX=ffff88800e7b3630 RCX=ffff88801b525d68 RDX=ffff88800e7b3640
RSI=ffff88801b525c80 RDI=0000000000000000 RBP=ffff888033078940 RSP=ffff88806ce089e0
R8 =0000000000000000 R9 =ffffed100d9c112d R10=0000000000000003 R11=0000000000000001
R12=ffff88801b525c80 R13=00000000000000e8 R14=0000000000000001 R15=0000000000000282
RIP=ffffffff81b1dc4e RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f1000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e565d84618 CR3=000000000ff4a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e
XMM02=2936333120657a697328203036393364 XMM03=3920646970202c22352e726f74756365
XMM04=37202020200a2e202e2e2e2e2e2e2e2e XMM05=20323920303020303020303020343820
XMM06=65206234203862202020200a3a297365 XMM07=75642078656820200a31323833363535
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000353397 RBX=0000000000000001 RCX=ffffffff84b7f167 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c6f94 RBP=dffffc0000000000 RSP=ffff888009717e58
R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001
R12=ffffffff86439250 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84b7de9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f1000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd4ad8fd40 CR3=00000000169f5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=532e29646d432a282e636578652f736f XMM03=00000000000000000000000000000000
XMM04=6b61656c2079726f6d656d203a475542 XMM05=63665f6f64202020200a30356278302f
XMM06=3033343178302f64326678302b6c746e XMM07=665f7379735f3436785f5f202020200a
XMM08=30663178302f35353178302b6c746e63 XMM09=5f6c6c61637379735f6f64202020200a
XMM10=20200a30363378302f666278302b3436 XMM11=5f4c4c41435359535f7972746e652020
XMM12=656d61726677685f72657466615f3436 XMM13=73746e696820636578650a056873616d
XMM14=617473657220726f7475636578651104 XMM15=00007a7a756620636578650900737472