0, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1221.633499] No source specified
[ 1221.640214] No source specified
18:04:19 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1221.705779] 9pnet_fd: Insufficient options for proto=fd
18:04:20 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@debug={'debug', 0x3d, 0x4}}]}})
syz_io_uring_complete(0x0)

18:04:20 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1221.788384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:04:20 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
readahead(r2, 0x5, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10300, 0x0)
read$ptp(r4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000040)={0x80000000, 0x0, &(0x7f0000000000)=[r1, r3, r0, r0, r4]}, 0x5)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

[ 1221.840898] No source specified
[ 1221.853080] No source specified
[ 1221.898911] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:04:20 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:04:20 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10001, 0x8, &(0x7f0000000280)=[{&(0x7f0000000080)="0f9d35", 0x3, 0xffffffff}, {&(0x7f00000000c0)="d9de82fdbd0ccd556415fb23e648a694a46771e4623ac4583dd2889972cea85a2c4df54d18462c13afd499671c30ed55a49622c9d9ec07ac3ea0ebee29e43640d43f40e05854683bdc249660a5e07606ea95a320abef600f040206c908cdf2c4048d26ed6b49a558e973f84657f27eaf6191c94ee7cf705aa56f27edc84b0b71511c9d6573c6a91a51c1c189808ab5c7ae09724adfdcb951862f9d0fb9abb92360aef4a5ed870f75faaa17890f0c99ebb5f98204ddc6fab84d06b1", 0xbb, 0xfffffffffffffe85}, {&(0x7f00000001c0)="c486bf6c6405edce079e4738b2308c1411a5caf28a84fd7fa35816268ad14e444ae003c52b18ea817df27fd540b7c3db11689f849deaeefe2f22ebd0e5efc54e0e22b9d5658af16bef28e103db7d1cd6d5f188782430c4e016075b288c2fe7c5133382", 0x63, 0x1}, {&(0x7f0000000240)="0750d8287d1a60d08b707f265de8f0065c7ccc3e52769856", 0x18, 0x8}, {&(0x7f00000003c0)="f80b28c1fea11fec84fdf7cc2128df4253b219952681f1f6c89d5e16ac2b6e8b61f5331b91ebd49c40383435e807aa20f1bbe700ca11f47f257285a29f97da0cb7eba36a6fe174f13ef8d6879c721e0951e41d91ff8e416f7c44c3e85c8c9ac436d8868bc5d6e71392c0adbf061aa7c6f7140ba06ea79e6e4e542ddad42e89adb76ceaf186a9dc28fb8d22ee1eaa300fa7cab296a92d14d189fbe369cca34d8c7320d2bf8bfe484e3b616a744a50f55a274e0e257473fccf786f811fa8e3feb1fca9a133ac46b55af45bb1c440fd01d1f9079d0ca068a1334b50f70f40493ee275c3e06ba7b86b6e93db23a6f5ccc8bfdab4", 0xf2, 0x9}, {&(0x7f00000004c0)="cd4bd00af9307b37c58e80dbdb87c8ac8be521c6fe57a8cbd78d257e0a6e75519af91ab36ace73e6bb23fdf7614649349a26f7897bd4c9b7aeea8134d817e74b15d29b5118f5ffc587deb1dab618a0bec65e73cb84ce1be0f72c84c3c349b0cd628f362c7ce825f3e6873d3deeee50737e4b8cf1297e5ec9c3ff73f60e7b40fd06b8f416f899572789de5a883d18f814be7b1aa22039faffd3094f654d52f77abd4eac6fa85ff8bdb13dfc7686e66557b999f222775c71ed221477ac130ebe49e679f48457e9e00f21d112023b6eb51d7e203340ae0c784dfe988f060f0b3b1961c0b6b20e04a01831b9ce98b47947fe3d", 0xf1, 0x5}, {&(0x7f00000005c0)="9c4eb1b9eb024c7258063b917649bb3faff491eb9cf58827756b36be0828536607aa7e452ae9aa8181f06f1232ed808acfb20a4254df60fdcabe2ade9380d6ce0e4852e5bd747acb54d7a353299decd1078712fe4e38e873bc95f9f83a09fb5c41531c03504f6ebc05b1df75b876c72608b82b25e2b0ceaec42fb15f0bbe3bd70c7cadbf2fe5b7eed295f7b760b5df53fcdf915ecbaabb79313ba0fbc1198a120f89a86b7cbd3d6b9a601bb27d2cf1e6a33e7931da3e90f05044ea1e8db2b1dcdb433c8ab7f563aa1aa2f57ebc3c924a73adda4d9427a17ef7a57f0f2c1de1f51bc13fbaa1aabc094a58f562c95bc4e537f01e39e33806c83c", 0xf9, 0xffff}, {&(0x7f00000006c0)="63fbac850342e1a7a61f5a4c60b6cb5bd9b0023a3eadddcd518c86d1700a4dd56904e86c6df7a8941419bcb924fc083a56c4fa84dd053346316d1403e68828dc5273e4882ab0f5d9fe731c76f69aaf7aef0b502c0756eefbcd6f1ce877a1aa2f48f61fd629b6bf8d9ff329b640c0eac12ff88a19fbf9a22678ddcd61429fb32e363594580169a7dfe31b2e7fa5f7fb0a730e06781a5114ca1e738b296d8e3e7e136976b3f6d04ccd8db9f1c1de12f1c0645f831c7b04c90e2c9f81980ce91327013c7a8a0bf38087", 0xc8, 0x4}], 0x48400, &(0x7f0000000900)=ANY=[@ANYBLOB="73697a653d6b2c5ae2359a7dea1239aa687567653d77697468696e5f73697a652c6e725f696e6f64657320346500002d362c7569643e000000", @ANYRESDEC=0xee00, @ANYBLOB=',\x00'])
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x204a7000)
r1 = epoll_create(0x2b)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x20000011})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000))
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
sendfile(r0, r0, &(0x7f0000000840)=0x7, 0x9f)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r4, 0x0, 0x0)
fadvise64(r4, 0x6, 0x8001, 0x3)
pidfd_send_signal(r3, 0xc, &(0x7f0000000880)={0x34, 0x101, 0x7}, 0x0)
socket$packet(0x11, 0x2, 0x300)

[ 1221.969395] loop1: detected capacity change from 0 to 264192
[ 1222.000852] No source specified
18:04:20 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1222.014610] No source specified
18:04:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000100)={0xb, 0x80, 0x4, 0x20, 0xff, 0x0, 0x0, 0x1, 0x42054, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x40, 0x4, 0x80, 0x9, 0x6, 0xffffff01, 0xfc01, 0x0, 0x0, 0x0, 0x3}, r1, 0x0, r0, 0xa)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)

18:04:20 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:04:20 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

[ 1224.602675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1224.606317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1224.611464] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1224.618132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1224.622219] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1226.636130] Bluetooth: hci6: command tx timeout
[ 1228.684110] Bluetooth: hci6: command tx timeout
[ 1230.732519] Bluetooth: hci6: command tx timeout
[ 1232.780088] Bluetooth: hci6: command tx timeout
[ 1242.452882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.454070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.538684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.539932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.881354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1243.209370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:04:51 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x400}, {r1, 0x20b2}], 0x2, 0xc7d2)

18:04:51 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:04:51 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:04:51 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:04:51 executing program 2:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r0=>0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r2, &(0x7f0000000600)=[{&(0x7f00000005c0)="27f8", 0x2}], 0x1)
read$ptp(r1, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="68002100c9baee0802f3f6234b5845915e3f374d4091eda0fdec89565770b1d46e30b6e057e57cab1089417c69756bb736f7bf386672000859ac00c7e816ddca58344ea8a8f11f631f26cfaf8c5d65286366e80d6f293ee41e82f68ff256f8852cc293fe76094542203278f69fe6ad00266df573d3cade387ce1d5bc740e8a86c16c936fd37172bcd002dbc33481f8e4491712afc4", @ANYRES16=r3, @ANYBLOB="000201000000fedbdf25010000000000000009410000004c001800000100756470000000000000000000000000000000000000000000000000006100"/98], 0x68}}, 0x20000000)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fbdbdf25010000000000000008410000004c00180000000075647000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000100000000000000000ac9cf2629526e26b1bb27ba5d0ee0128b16c751b8d61c57791f3fba1d7800bdbf3afd2374f31e707c937af0522a2284c72c600f7a9ccccc4a84b4e24f58d60398a4c48f611e414e6e6"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time\x00')
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r4)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', <r7=>0x0, 0x2f, 0x9, 0x7, 0x7fffffff, 0x18, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0, 0x8, 0x7800, 0x5, 0x10000}})
fsetxattr(0xffffffffffffffff, &(0x7f00000007c0)=@random={'system.', '\x00'}, &(0x7f0000000800)='/proc/self\x00', 0xb, 0x1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe38}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x64}}, 0x20040011)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)

18:04:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x6}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:04:51 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:04:51 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r0)

[ 1253.305685] No source specified
[ 1253.310204] No source specified
[ 1253.365162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1253.690179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:05:01 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:01 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
fcntl$dupfd(r1, 0x406, r0)

18:05:01 executing program 7:
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r5 = dup2(r3, r4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r5, 0x0)

18:05:01 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:05:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgid(0x0)
r1 = fork()
kcmp(r1, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2f, 0x1, 0x8, 0x40, 0x0, 0x7, 0x49, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0xe71e, 0x587}, 0x0, 0x6, 0xfffffff7, 0x6, 0x8000, 0xfffffffc, 0x8001, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x2)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:05:01 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:05:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x7}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:05:01 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0xf9fdffff00000000, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1263.037942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:05:01 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r1 = io_uring_setup(0x15a5, &(0x7f0000000000)={0x0, 0xcc8, 0x0, 0x1, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x7ff, 0x0, &(0x7f00000000c0)=[r2, r0, r0, r0, r0]}, 0x5)

[ 1263.061302] No source specified
[ 1263.074710] No source specified
18:05:01 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/170)

18:05:01 executing program 3:
creat(&(0x7f00000003c0)='./file0\x00', 0x8)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x1)
dup3(r1, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

18:05:01 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1263.190942] No source specified
[ 1263.193866] No source specified
18:05:01 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/170)

[ 1263.226489] 9pnet_fd: Insufficient options for proto=fd
18:05:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
pidfd_send_signal(r0, 0x33, &(0x7f0000000000)={0xc, 0x8000, 0x4}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:05:01 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:01 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
pidfd_send_signal(r0, 0x12, &(0x7f0000000000)={0x19, 0x0, 0x59}, 0x0)

[ 1263.308739] No source specified
[ 1263.313702] No source specified
[ 1263.368690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:05:11 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:05:11 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/170)

18:05:11 executing program 2:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = fork()
r2 = fork()
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xf8, r0, 0x100, 0xf0bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0xa800}, 0x8000)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000600010000000100000008000300", @ANYRES32=r5], 0x28}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20048040)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000600010000000100000008000300", @ANYRES32=r8], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r8)
pidfd_send_signal(r7, 0x2a, &(0x7f0000000000)={0x3c, 0xb2, 0x8}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000008990e0e7579345641259147a2790fbbdc1f87f59696d4c71460bc1ef5f2a6c0744ca0536749eea0e5fdac2903905886973b3bc71f95e6f4a004d24b9f87001eca4a57cbb58a78e7a546f884321a63fa3ed90b5a6519a74b5374503ea517e3ffa454f63915476cd14815cb71f376cef02dd9ac34bdf3ffb65e1ce66739102077aa5388bb0e4ce804052864803e5a52d1de4df90cead82be56204871ef507b5adac857794650cad5b329a8b92a74dbb569b23c7d73a5426f65d8ba022b56beaa6e8bdb6d17c93cc70c5b01c145dcfd88ccb0696ed13696a23cbe0def947349d4bad4511575f690fa", @ANYRES16=r9, @ANYBLOB="00012abd7000ffdbdf25090000000500330001000000"], 0x1c}}, 0x4000001)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:05:11 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:05:11 executing program 3:
creat(&(0x7f00000003c0)='./file0\x00', 0x8)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x1)
dup3(r1, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

18:05:11 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x9}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:05:11 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x80000001}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xc1)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

[ 1273.686941] 9pnet_fd: Insufficient options for proto=fd
[ 1273.697673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:05:11 executing program 3:
creat(&(0x7f00000003c0)='./file0\x00', 0x8)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x1)
dup3(r1, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

[ 1273.721662] No source specified
[ 1273.723970] No source specified
[ 1273.760016] 9pnet_fd: Insufficient options for proto=fd
18:05:12 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:12 executing program 3:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:12 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

[ 1273.827423] 9pnet_fd: Insufficient options for proto=fd
18:05:12 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

[ 1273.836525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
18:05:12 executing program 3:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1273.906778] No source specified
[ 1273.913530] No source specified
18:05:12 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
syz_io_uring_complete(0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

[ 1273.925807] 9pnet_fd: Insufficient options for proto=fd
18:05:12 executing program 3:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1274.015302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1274.040345] 9pnet_fd: Insufficient options for proto=fd
18:05:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0xf}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:05:22 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)

18:05:22 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000010000f318000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)="0a3ec3883f04444efe578d244054a40f18e09f0349b436d3e9985c1bd7d94831905f8cdf4e6a280b5f097b71ca64339f1ccd49fd280566262241542546845cdd78e73a862330f0453778ee08d2abcbcf299a9811c5fcd2b1582e90978f18d312cc0e24afb5416b5ccafa6829b71c26d9fbcd762b047dda4e51c834efd90ab27cfce1787e225257b85db751679dc8464b0b473be81d2b11dfdde83deef840350848ee1f9f0048e2bfb13f87d23e26060faae61433b9dbabe53c2a1b97457167a05f5ec7c7f86fdf8aeac9bfad7f1b66ad9ba59eba5808c7", 0xd7, r0}, 0x68)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r2 = getpgid(0x0)
r3 = getpgid(0x0)
r4 = fork()
kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = getpgid(0x0)
r6 = fork()
kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
setpgid(0x0, r6)
r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
kcmp(r3, r6, 0x0, r7, r1)
r8 = fork()
kcmp(r8, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r9 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0xc9, 0x1f, 0x82, 0x0, 0x5, 0x20a01, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x1, 0x8}, 0x1822, 0x8a8b, 0x400000, 0x0, 0x800, 0x58bc, 0xcbd, 0x0, 0x81, 0x0, 0xd8}, 0xffffffffffffffff, 0xd, r1, 0x3)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, 0x464, 0x200, 0x70bd2d, 0x25dfdbfc, "bf9919dfd4285f23f039374d137d0ad379924370d32e81617bb353aa7bd793910355e04d9f40defc23d27d0180a5a12b0c53bb24e7ef8c989c27c099498eec48368851bef39e0795ed1eddda9d27d01f128a4c3d549f2d6bb3662ba550681fa4652088c8bee647b398ef98dfa23d749f50d31579ae95c77062661db56984b3b741419ca079443c69b1346f5ab2f721e54432c1cd820918d92e36411bb7daeabd03d9ebbeefeb5cbfde3582448fa8f9077e5fa0fc0b9c113ed2feabda871b811eceb32f7d90ac2c14188787da7df8b4a37d3d6fcd91", ["", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x800)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x40, 0x0, 0x7, 0x0, 0xfffffffffffffabe, 0x8044, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x385acc0b, 0x57}, 0x1000, 0x1, 0x2, 0x0, 0x7fffffff, 0xffff0000, 0x80, 0x0, 0x5, 0x0, 0x3}, r2, 0x0, r9, 0x8)

18:05:22 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:05:22 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
syz_io_uring_complete(0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:22 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(0x0, 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:22 executing program 4:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

[ 1284.293690] No source specified
[ 1284.299686] No source specified
[ 1284.346622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:05:22 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:05:22 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:22 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
syz_io_uring_complete(0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(0x0, 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1284.488303] No source specified
[ 1284.493344] No source specified
18:05:22 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:22 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:05:22 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:22 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x0, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1284.663395] cgroup: fork rejected by pids controller in /syz2
[ 1284.687814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1284.704393] No source specified
[ 1284.712424] No source specified
18:05:34 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:05:34 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:34 executing program 4:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:05:34 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(0x0, 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:34 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x11}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:05:34 executing program 2:
r0 = getpgid(0x0)
r1 = fork()
kcmp(r1, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x1fffffffe00, 0x0, 0x0, 0x0, 0x3, 0x1f}, r1, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:05:34 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x0, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1296.302458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1296.312180] No source specified
[ 1296.323204] No source specified
18:05:34 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:34 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:34 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x9, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:34 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
accept$unix(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x6e)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, <r2=>0x0})
fcntl$getown(r0, 0x9)
r3 = getpgid(r2)
r4 = getpgid(r3)
r5 = fork()
kcmp(r5, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
setpgid(0x0, r5)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x40, 0x3, 0x3, 0x1, 0x0, 0x1000000000008001, 0x210, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x5, 0x1ff}, 0x800, 0x7, 0x10000, 0x5, 0xfffffffffffff000, 0x2, 0x20, 0x0, 0x6c2, 0x0, 0x200000008004}, r5, 0x4, 0xffffffffffffffff, 0x9)
pidfd_send_signal(0xffffffffffffffff, 0x16, &(0x7f00000000c0)={0x3, 0x0, 0x800}, 0x0)
read$ptp(r1, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000002c0)={{0x3a, @loopback, 0x4e20, 0x3, 'rr\x00', 0x8, 0x6, 0x53}, {@remote, 0x4e21, 0x1, 0x3, 0x474, 0xfffffffc}}, 0x44)
syz_open_procfs(r5, &(0x7f0000000240)='comm\x00')
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000004c0)=ANY=[@ANYBLOB="444d6020603d892d10cd80cf3e91bca283f71b20a5927b07513494bf01aa9e805510df6eb67b1abeb3df4129b2fcc727d1458e6b49505c5e762d51676872fda11e46a2edcc783c5bb06e24e53bb554d2b3d99dac0f41ed057df6618b8bc2894ddadf35c942bf0814f48e63fdc1266c747314a9892683759a6945102679c3ae666e8a24ab8714cc7179f6aafd54848d7d25bbcb7d64bb5c22f3eaea1aaa596bc8647d79afc6f96d7cab6c"])
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0xff, 0x5, 0x2, 0x0, 0x1f, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x300, 0x1, @perf_bp, 0x993, 0xfc, 0x5, 0x5, 0xfffffffffffffff7, 0x101, 0xe3d, 0x0, 0x80000000, 0x0, 0x7}, 0x0, 0x7, r1, 0x8)

18:05:34 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x0, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1296.468735] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0)
18:05:34 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63, 0x1)

[ 1296.488365] No source specified
[ 1296.494790] No source specified
18:05:34 executing program 1:
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:34 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1296.617494] 9pnet_fd: Insufficient options for proto=fd
[ 1296.655082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:05:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:45 executing program 4:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:05:45 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/191, 0xbf)

18:05:45 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:05:45 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x0, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:05:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x12}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

[ 1306.902207] 9pnet_fd: Insufficient options for proto=fd
[ 1306.908961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1306.920333] No source specified
18:05:45 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

[ 1306.923819] No source specified
18:05:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = eventfd2(0x4, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:45 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x1)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/proc/self\x00'}, {0x20, '/proc/self\x00'}, {0x20, ',(!)-'}, {0x20, '\xf2'}, {0x20, '/proc/self\x00'}, {0x20, '/))&'}, {0x20, '@'}], 0xa, "12f79fea6585be77f13b0669eb4055bfc2745175275db997113fe0dedb14eab9e2164f527fb6"}, 0x64)

[ 1307.004243] 9pnet_fd: Insufficient options for proto=fd
18:05:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xb, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1307.064441] No source specified
[ 1307.070880] No source specified
18:05:45 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:45 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x0, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:05:45 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/243, 0xf3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:05:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1307.148661] kernel write not supported for file [eventfd] (pid: 14198 comm: kworker/1:1)
18:05:45 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x1)

[ 1307.250193] No source specified
[ 1307.257719] No source specified
[ 1307.260863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:05:55 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x0, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:05:55 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:55 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:05:55 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:05:55 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:55 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x14}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:05:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x1]}, 0x8, 0x80800)
pidfd_send_signal(r1, 0xb, &(0x7f0000000040)={0x1e, 0x7, 0x8}, 0x0)

18:05:55 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63, 0x1)

18:05:55 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63, 0x1)

[ 1317.696384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1317.714492] No source specified
[ 1317.716095] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1317.720673] No source specified
18:05:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:05:56 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:05:56 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:05:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:05:56 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63, 0x1)

[ 1317.858563] No source specified
[ 1317.862611] No source specified
18:05:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1317.913203] kernel write not supported for file [eventfd] (pid: 14198 comm: kworker/1:1)
[ 1317.936623] No source specified
[ 1317.948089] No source specified
[ 1318.029101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:06:07 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:06:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x15}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:06:07 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:06:07 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0x0, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:06:07 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000a0467ca5b6dc8527c577fd6792eeb96cc3ef3bbc77faa111de00"/41], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:07 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x1)

18:06:07 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x204001, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x4800, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000009c0)=<r3=>0x0)
perf_event_open(&(0x7f0000000940)={0x3, 0x80, 0x3f, 0x3f, 0x5, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x20, 0x4f}, 0x40, 0x89, 0xd6, 0x8, 0x800000000000000, 0x80000000, 0x6e, 0x0, 0x4, 0x0, 0x6}, r3, 0x2, 0xffffffffffffffff, 0xb)
pidfd_send_signal(r2, 0x19, &(0x7f0000000880)={0x2, 0x8f0, 0x6}, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000800)={0x17, 0x9e, &(0x7f0000000280)="25e600312132e9a1e0d3f05e36d13eae491e50dba0d4ce1b79344784e08bbc58f98f43b2b82d260d49693933da1288a71cc1ba43a38bbc16d59dc35d6dccdee86711caa7f0d87044c5a7a80dea7f6258f833b01c888fa4ebbf71503725758b33dc6a4bcbfebd04f6321f602926089c42d96de1c6648838e1532d6a48fb669eccf1b7eb08e573e43693708f0725fcefeb0f4551f4f415ccab6b15511b2c6c"})
sendfile(0xffffffffffffffff, r0, 0x0, 0xebf)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000a40), 0x8, 0x800)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffbff}]}, 0x30}}, 0x4040040)
read$ptp(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x20, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x44f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x2]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x8, 0xfffffff9, 0x7a, 0x4, 0x7, 0x5, 0x1, 0x5]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffc9}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x77}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x401, 0x4]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x59]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x810)
ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000900)={0x1f, 0x7, 0x2, 0x5, 0x1, 0x3ff})
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/194)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7fff, 0x1, [0x20, 0x8, 0x3837, 0xfcc, 0xfff], [0x1, 0x100, 0x400, 0xfffffffffffff001, 0x67, 0xff, 0x1, 0x8, 0x80000000, 0xffffffffffff4f4d, 0x1f, 0x3ff, 0x1000, 0x20, 0xe4f, 0xdb24, 0xfffffffffffffffb, 0x7f, 0x10001, 0x9, 0x3, 0x987, 0x400, 0x2, 0xbe, 0x9, 0x2, 0x809, 0x101, 0x1ff, 0xfe7, 0x8001, 0x800000000, 0x101, 0x6, 0x1400000000000, 0x7, 0x0, 0x4, 0x100000001, 0x9, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff9, 0x5ca, 0xffffffffffff691a, 0xff, 0x200, 0x5, 0x7, 0x5, 0x7, 0x100, 0x0, 0x1, 0x9, 0x3ff, 0x9, 0xa0f, 0x6, 0xb4, 0x100, 0x92, 0x20, 0x7fffffff, 0x7, 0x4, 0xda, 0x10000, 0x81, 0x1, 0x2716, 0x0, 0x1, 0x3, 0x9, 0x3, 0x2, 0x100000000, 0x0, 0x4, 0x7, 0x10001, 0x95, 0xfffffffffffffff7, 0x1f, 0x200, 0x4000000e2, 0x1, 0xbfca, 0xed7d, 0x7fff, 0xffffffff80000001, 0x6, 0x4, 0x80000001, 0xfffffffffffffff7, 0x3, 0xffffffffdd28ca48, 0x80000001, 0xa7, 0x2, 0x80000001, 0x7fff, 0x7, 0x3, 0x8, 0x400, 0xffff, 0x6, 0x3, 0x3f, 0x7, 0x6, 0x927d, 0x1, 0x8000, 0x7, 0x0, 0xedd, 0x40]})

[ 1329.481621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1329.482235] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1329.498170] No source specified
18:06:07 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1329.507300] No source specified
18:06:07 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x1)

18:06:07 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x4, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:06:07 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x900, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:07 executing program 7:
msgsnd(0x0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(0x0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:07 executing program 7:
msgsnd(0x0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(0x0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:07 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x1)

18:06:07 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x4000, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/42, 0x2a, 0x3ff, 0x6})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

[ 1329.728599] No source specified
[ 1329.757260] No source specified
[ 1329.809082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:06:20 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:20 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x4, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:06:20 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:06:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x16}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:06:20 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
fstat(r0, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x80000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
r5 = gettid()
tgkill(0x0, r5, 0x80000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r7, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r5, 0x6})
setgid(r7)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000001440)={{}, {}, [{}]}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:06:20 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x0)

18:06:20 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0x0, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:06:20 executing program 7:
msgsnd(0x0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(0x0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1342.118487] No source specified
[ 1342.128463] No source specified
[ 1342.145474] audit: type=1400 audit(1751997980.389:14): avc:  denied  { setattr } for  pid=20176 comm="syz-executor.2" name="smaps" dev="proc" ino=26109 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1
18:06:20 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x0)

[ 1342.166907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:06:20 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xb00, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:20 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1342.318386] No source specified
[ 1342.329808] No source specified
18:06:20 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:20 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000040)=""/99, 0x63, 0x0)

18:06:20 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:20 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0xc0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffff)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
pidfd_send_signal(r1, 0x12, &(0x7f0000000080)={0x5, 0x400, 0x7fff}, 0x0)
pidfd_send_signal(r1, 0x22, &(0x7f0000000000)={0x32, 0x3ff, 0x6}, 0x0)

[ 1342.528273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1346.956148] Bluetooth: hci6: command 0x0406 tx timeout
18:06:33 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:33 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x4, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:06:33 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:06:33 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
fstat(r0, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x80000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
r5 = gettid()
tgkill(0x0, r5, 0x80000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r7, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r5, 0x6})
setgid(r7)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000001440)={{}, {}, [{}]}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:06:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x17}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:06:33 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x704c0, 0x0)
r0 = getpgid(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1986cf1f029ef776, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x5, 0x3, 0x0, 0x0, 0x7, 0x168, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0x9}, 0xa00, 0x400, 0x8, 0x5, 0x7, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, 0x7}, r0, 0xa, r1, 0x3)
r2 = getpgrp(0xffffffffffffffff)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x0, 0x8, 0x75, 0x0, 0x40, 0x50, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp, 0x74103, 0x8, 0x4c, 0x8, 0x0, 0x7, 0x100, 0x0, 0x2, 0x0, 0x3}, r2, 0x4, r3, 0x2)
r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xff, 0x3, 0x7f, 0x20, 0x0, 0xffffffffffff9b56, 0x8, 0x10, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xcf9b, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0xda, 0x2, 0x2, 0x2, 0x3, 0xfff, 0x0, 0x7, 0x0, 0x1}, r2, 0xffffffffffffffff, r4, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:06:33 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0x0, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:06:33 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000000)={0x3, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:33 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1355.207871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:06:33 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:06:33 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:06:33 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
fstat(r0, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x80000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
r5 = gettid()
tgkill(0x0, r5, 0x80000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r7, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r5, 0x6})
setgid(r7)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000001440)={{}, {}, [{}]}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:06:33 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:33 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:33 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:06:33 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
fstat(r0, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x80000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
r5 = gettid()
tgkill(0x0, r5, 0x80000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r7, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r5, 0x6})
setgid(r7)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000001440)={{}, {}, [{}]}, 0x2c, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

[ 1355.571965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:06:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:45 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
accept$unix(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x6e)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, <r2=>0x0})
fcntl$getown(r0, 0x9)
r3 = getpgid(r2)
r4 = getpgid(r3)
r5 = fork()
kcmp(r5, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
setpgid(0x0, r5)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x40, 0x3, 0x3, 0x1, 0x0, 0x1000000000008001, 0x210, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x5, 0x1ff}, 0x800, 0x7, 0x10000, 0x5, 0xfffffffffffff000, 0x2, 0x20, 0x0, 0x6c2, 0x0, 0x200000008004}, r5, 0x4, 0xffffffffffffffff, 0x9)
pidfd_send_signal(0xffffffffffffffff, 0x16, &(0x7f00000000c0)={0x3, 0x0, 0x800}, 0x0)
read$ptp(r1, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000002c0)={{0x3a, @loopback, 0x4e20, 0x3, 'rr\x00', 0x8, 0x6, 0x53}, {@remote, 0x4e21, 0x1, 0x3, 0x474, 0xfffffffc}}, 0x44)
syz_open_procfs(r5, &(0x7f0000000240)='comm\x00')
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000004c0)=ANY=[@ANYBLOB="444d6020603d892d10cd80cf3e91bca283f71b20a5927b07513494bf01aa9e805510df6eb67b1abeb3df4129b2fcc727d1458e6b49505c5e762d51676872fda11e46a2edcc783c5bb06e24e53bb554d2b3d99dac0f41ed057df6618b8bc2894ddadf35c942bf0814f48e63fdc1266c747314a9892683759a6945102679c3ae666e8a24ab8714cc7179f6aafd54848d7d25bbcb7d64bb5c22f3eaea1aaa596bc8647d79afc6f96d7cab6c"])
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0xff, 0x5, 0x2, 0x0, 0x1f, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x300, 0x1, @perf_bp, 0x993, 0xfc, 0x5, 0x5, 0xfffffffffffffff7, 0x101, 0xe3d, 0x0, 0x80000000, 0x0, 0x7}, 0x0, 0x7, r1, 0x8)

18:06:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:06:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:06:45 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x0, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:06:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x18}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:06:45 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

[ 1366.885787] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
18:06:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xa0000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:06:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x0, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:06:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:06:45 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

[ 1366.995898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:06:45 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r5 = dup2(r3, r4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r5, 0x0)

[ 1367.147792] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
[ 1369.814480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1369.817927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1369.822444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1369.828035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1369.831779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1371.852102] Bluetooth: hci6: command tx timeout
[ 1373.900296] Bluetooth: hci6: command tx timeout
[ 1375.948119] Bluetooth: hci6: command tx timeout
[ 1377.996082] Bluetooth: hci6: command tx timeout
[ 1387.715377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1387.716303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1387.765420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1387.766243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1388.037264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1388.366196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:07:17 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:17 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x19}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:07:17 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:17 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xe0ffff, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:17 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x0, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:07:17 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000013c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000003c0)={{r0}, r1, 0x8, @unused=[0x6, 0x2, 0x80000001, 0x3ff], @devid})
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001900)={0x1, 0xcbe8})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
pidfd_send_signal(r2, 0x2f, &(0x7f00000001c0)={0x8002f, 0x7, 0x6}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r4, 0x0, 0x0)
perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0x7a, 0x81, 0xe0, 0x1f, 0x0, 0x5, 0x80000, 0x14, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x216b, 0x0, @perf_bp={&(0x7f0000001780), 0x5}, 0x1001, 0x8, 0x4, 0x2, 0x3ff, 0x800, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffeffff}, 0xffffffffffffffff, 0x10, r4, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001840), 0x8000, 0x0)
pidfd_send_signal(r5, 0x6, &(0x7f0000001880)={0x1f, 0x7fff, 0x8}, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x14421, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x10404, 0x200, 0x80, 0x2, 0x40, 0x9, 0x916f, 0x0, 0x52c5, 0x0, 0x3}, r0, 0x2, 0xffffffffffffffff, 0x8)
r6 = getpgid(0x0)
r7 = fork()
kcmp(r7, r6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
clone3(&(0x7f0000001700)={0x14008300, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000240), {0x16}, &(0x7f0000000280)=""/137, 0x89, &(0x7f0000001940)=""/222, &(0x7f00000016c0)=[0x0, r6], 0x2, {r3}}, 0x58)

18:07:17 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x0, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1399.427930] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:07:17 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x0, "5cb901000100c3dbb191e412"}, 0x14, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1399.436271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:07:17 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, 0x0, 0x0)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:17 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:17 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x0, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x2700000000000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xebe)

18:07:17 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:07:17 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(0x0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:07:17 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x0, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:07:17 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/180)
r1 = msgget(0x2, 0x100)
msgget(0x2, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/10}, 0x12, 0x1, 0x1000)
msgctl$IPC_RMID(r1, 0x0)

18:07:17 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, 0x0, 0x0)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

[ 1399.667132] No source specified
[ 1399.677565] No source specified
[ 1399.769228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:07:18 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
r1 = msgget(0x3, 0x60)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f0000000000)={0x0, ""/71}, 0x4f, 0x0, 0x3000)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/130}, 0x8a, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2ed3899bce4f7c6ca225153fadd43b377ff356c43ec625ce8067a4e276d92bd33302882fe2494355801f8fc90b362001fb3a49fb8b2a3e0c16132e2f5742261597a7d15e46ee517dc2e5a5489fa2d59ab08cfd976d2b3dc394ba1739eac8384c99cd150636e22e0ef6a778f95b99e1e1109a0eefed3e64d904fadefa2db94ff16c"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)

18:07:18 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, 0x0, 0x0)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:18 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:18 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x0, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:07:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1a}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

[ 1400.250760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1400.275366] No source specified
[ 1400.281442] No source specified
18:07:18 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0), 0x0)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1400.368200] No source specified
[ 1400.373568] No source specified
18:07:18 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0), 0x0)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:18 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x0, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:18 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x0, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:07:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1400.545918] No source specified
[ 1400.554130] No source specified
[ 1400.576100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:07:30 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x0, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:30 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(0x0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:07:30 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x0, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:07:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1b}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:07:30 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:30 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
r1 = msgget(0x3, 0x60)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f0000000000)={0x0, ""/71}, 0x4f, 0x0, 0x3000)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/130}, 0x8a, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2ed3899bce4f7c6ca225153fadd43b377ff356c43ec625ce8067a4e276d92bd33302882fe2494355801f8fc90b362001fb3a49fb8b2a3e0c16132e2f5742261597a7d15e46ee517dc2e5a5489fa2d59ab08cfd976d2b3dc394ba1739eac8384c99cd150636e22e0ef6a778f95b99e1e1109a0eefed3e64d904fadefa2db94ff16c"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)

18:07:30 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:30 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0), 0x0)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

[ 1412.686915] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1412.698790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1412.711104] No source specified
[ 1412.715233] No source specified
18:07:30 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:30 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:31 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1412.852483] No source specified
[ 1412.854505] No source specified
18:07:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:31 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:31 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1412.963560] No source specified
[ 1412.968379] No source specified
[ 1413.018327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:07:40 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(0x0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:07:40 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1)
read$ptp(0xffffffffffffffff, 0x0, 0x0)

18:07:40 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:40 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:07:40 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1c}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:07:40 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:40 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
r1 = msgget(0x3, 0x60)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f0000000000)={0x0, ""/71}, 0x4f, 0x0, 0x3000)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/130}, 0x8a, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2ed3899bce4f7c6ca225153fadd43b377ff356c43ec625ce8067a4e276d92bd33302882fe2494355801f8fc90b362001fb3a49fb8b2a3e0c16132e2f5742261597a7d15e46ee517dc2e5a5489fa2d59ab08cfd976d2b3dc394ba1739eac8384c99cd150636e22e0ef6a778f95b99e1e1109a0eefed3e64d904fadefa2db94ff16c"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)

18:07:41 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1422.836887] No source specified
[ 1422.851490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1422.857164] No source specified
18:07:41 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:07:41 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

18:07:41 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x1, 0x410)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/128)
r3 = msgget$private(0x0, 0x20)
msgrcv(r3, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r3, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)

18:07:41 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

18:07:41 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x9000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1423.011872] No source specified
18:07:41 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

[ 1423.020504] No source specified
18:07:41 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x1, 0x410)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/128)
r3 = msgget$private(0x0, 0x20)
msgrcv(r3, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r3, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)

[ 1423.193586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:07:53 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, 0x0, 0x0, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:07:53 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
r1 = msgget(0x3, 0x60)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f0000000000)={0x0, ""/71}, 0x4f, 0x0, 0x3000)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/130}, 0x8a, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2ed3899bce4f7c6ca225153fadd43b377ff356c43ec625ce8067a4e276d92bd33302882fe2494355801f8fc90b362001fb3a49fb8b2a3e0c16132e2f5742261597a7d15e46ee517dc2e5a5489fa2d59ab08cfd976d2b3dc394ba1739eac8384c99cd150636e22e0ef6a778f95b99e1e1109a0eefed3e64d904fadefa2db94ff16c"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:07:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:07:53 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x1, 0x410)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/128)
r3 = msgget$private(0x0, 0x20)
msgrcv(r3, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r3, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)

18:07:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1d}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:07:53 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1434.987746] 9pnet_fd: Insufficient options for proto=fd
[ 1434.993765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:07:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1435.020490] No source specified
[ 1435.022504] No source specified
18:07:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xb000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1435.083549] 9pnet_fd: Insufficient options for proto=fd
18:07:53 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x1, 0x410)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/128)
r3 = msgget$private(0x0, 0x20)
msgrcv(r3, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r3, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x8, 0x0)

[ 1435.133091] No source specified
[ 1435.142575] No source specified
18:07:53 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:07:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

18:07:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1435.217714] 9pnet_fd: Insufficient options for proto=fd
[ 1435.238552] No source specified
[ 1435.248259] No source specified
18:07:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}})

18:07:53 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x1, 0x410)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/128)
r3 = msgget$private(0x0, 0x20)
msgrcv(r3, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r3, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)

[ 1435.319831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1435.352296] 9pnet_fd: Insufficient options for proto=fd
18:08:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}})

18:08:04 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, 0x0, 0x0, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:08:04 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x20000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:04 executing program 4:
msgget$private(0x0, 0x0)
r0 = msgget(0x1, 0x410)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/128)
r2 = msgget$private(0x0, 0x20)
msgrcv(r2, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(r2, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:08:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1e}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:08:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:08:04 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:08:04 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
r1 = msgget(0x3, 0x60)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f0000000000)={0x0, ""/71}, 0x4f, 0x0, 0x3000)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/130}, 0x8a, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 1446.381367] 9pnet_fd: Insufficient options for proto=fd
[ 1446.417572] No source specified
[ 1446.422479] No source specified
[ 1446.428085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1446.761921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:08:15 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = eventfd2(0x0, 0x1)
dup3(r1, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

18:08:15 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
msgget(0x3, 0x60)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/71}, 0x4f, 0x0, 0x3000)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:08:15 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}})

18:08:15 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:08:15 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x20100000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:15 executing program 4:
msgget$private(0x0, 0x0)
r0 = msgget(0x1, 0x410)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/128)
r2 = msgget$private(0x0, 0x20)
msgrcv(r2, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r0, 0x0)

18:08:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x21}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:08:15 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, 0x0, 0x0, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1457.755545] 9pnet_fd: Insufficient options for proto=fd
[ 1457.775531] 9pnet_fd: Insufficient options for proto=fd
[ 1457.802837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:08:16 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = eventfd2(0x0, 0x1)
dup3(r1, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1457.835211] 9pnet_fd: Insufficient options for proto=fd
18:08:16 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x4, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

18:08:16 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1458.145919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:08:29 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
msgget(0x3, 0x60)
msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:08:29 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = eventfd2(0x0, 0x1)
dup3(r1, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

18:08:29 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x0, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:08:29 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:08:29 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 1)

18:08:29 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x22}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:08:29 executing program 4:
msgget$private(0x0, 0x0)
r0 = msgget(0x1, 0x410)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/128)
r2 = msgget$private(0x0, 0x20)
msgrcv(r2, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r0, 0x0)

[ 1470.949802] No source specified
[ 1470.956118] No source specified
[ 1470.985912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1470.996437] 9pnet_fd: Insufficient options for proto=fd
18:08:29 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
msgget(0x3, 0x60)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:08:29 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:29 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 2)

18:08:29 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:08:29 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x140)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 1471.123461] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:08:29 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xf9fdffff, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:29 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:08:29 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 3)

[ 1471.325502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1471.376949] FAULT_INJECTION: forcing a failure.
[ 1471.376949] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1471.379190] CPU: 1 UID: 0 PID: 22534 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1471.379220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1471.379233] Call Trace:
[ 1471.379240]  <TASK>
[ 1471.379248]  dump_stack_lvl+0xfa/0x120
[ 1471.379282]  should_fail_ex+0x4d7/0x5e0
[ 1471.379310]  _copy_from_user+0x30/0xd0
[ 1471.379340]  memdup_user+0x7e/0xe0
[ 1471.379375]  strndup_user+0x78/0xe0
[ 1471.379410]  __x64_sys_mount+0x136/0x300
[ 1471.379447]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1471.379482]  ? lock_release+0xc8/0x290
[ 1471.379515]  do_syscall_64+0xbf/0x360
[ 1471.379545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1471.379568] RIP: 0033:0x7f4b2db30b19
[ 1471.379584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1471.379604] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1471.379625] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1471.379640] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1471.379652] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1471.379665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1471.379678] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1471.379709]  </TASK>
18:08:40 executing program 4:
msgget$private(0x0, 0x0)
r0 = msgget(0x1, 0x410)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/128)
r2 = msgget$private(0x0, 0x20)
msgrcv(r2, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r0, 0x0)

18:08:40 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x0, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:08:40 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xffffe000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x23}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:08:40 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:08:40 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:08:40 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 4)

18:08:40 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1482.190377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1482.229944] FAULT_INJECTION: forcing a failure.
[ 1482.229944] name failslab, interval 1, probability 0, space 0, times 0
[ 1482.231708] CPU: 0 UID: 0 PID: 22655 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1482.231738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1482.231751] Call Trace:
[ 1482.231759]  <TASK>
[ 1482.231767]  dump_stack_lvl+0xfa/0x120
[ 1482.231802]  should_fail_ex+0x4d7/0x5e0
[ 1482.231830]  should_failslab+0xc2/0x120
[ 1482.231852]  __kmalloc_cache_noprof+0x73/0x470
[ 1482.231879]  ? __might_fault+0xe0/0x190
[ 1482.231904]  ? copy_mount_options+0x55/0x180
[ 1482.231934]  ? copy_mount_options+0x55/0x180
[ 1482.231954]  ? memdup_user+0x95/0xe0
[ 1482.231994]  copy_mount_options+0x55/0x180
[ 1482.232020]  __x64_sys_mount+0x1ab/0x300
[ 1482.232056]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1482.232091]  ? lock_release+0xc8/0x290
[ 1482.232123]  do_syscall_64+0xbf/0x360
[ 1482.232153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1482.232175] RIP: 0033:0x7f4b2db30b19
[ 1482.232192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1482.232212] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1482.232232] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1482.232247] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1482.232260] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1482.232273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1482.232285] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1482.232316]  </TASK>
18:08:40 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffdf9, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:40 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:08:40 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:08:40 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 5)

18:08:40 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xffffff8c, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:40 executing program 2:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x1)
dup3(r1, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

[ 1482.487631] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:08:40 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1482.519081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:08:40 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 6)

[ 1482.559888] 9pnet_fd: Insufficient options for proto=fd
[ 1482.690290] FAULT_INJECTION: forcing a failure.
[ 1482.690290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1482.692299] CPU: 0 UID: 0 PID: 22801 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1482.692328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1482.692340] Call Trace:
[ 1482.692348]  <TASK>
[ 1482.692356]  dump_stack_lvl+0xfa/0x120
[ 1482.692389]  should_fail_ex+0x4d7/0x5e0
[ 1482.692417]  _copy_from_user+0x30/0xd0
[ 1482.692448]  copy_mount_options+0x76/0x180
[ 1482.692476]  __x64_sys_mount+0x1ab/0x300
[ 1482.692513]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1482.692548]  ? lock_release+0xc8/0x290
[ 1482.692581]  do_syscall_64+0xbf/0x360
[ 1482.692611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1482.692633] RIP: 0033:0x7f4b2db30b19
[ 1482.692649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1482.692669] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1482.692690] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1482.692704] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1482.692717] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1482.692730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1482.692742] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1482.692773]  </TASK>
[ 1482.722813] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1494.412244] Bluetooth: hci6: command 0x0406 tx timeout
18:08:53 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x0, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124ece52c41d38b321f406d4f53569195aef14497269eabc5d0667246f56b0dac5399caa80086ea9010bc6aa3d4dec74ce714637bd1cae58c5fb7d7abae15a66d24eeeb61810ab3cd3645d005523d4a6cb7ba591929844fcc45817fc0a7425d6a7e2c"}, 0xca, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:08:53 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:08:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x24}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:08:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffff6, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:08:53 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:08:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 7)

18:08:53 executing program 4:
msgget$private(0x0, 0x0)
msgget(0x1, 0x410)
r0 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/128)
r1 = msgget$private(0x0, 0x20)
msgrcv(r1, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r1, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:08:53 executing program 2:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x1)
dup3(r1, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

[ 1495.260109] 9pnet_fd: Insufficient options for proto=fd
[ 1495.293417] FAULT_INJECTION: forcing a failure.
18:08:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xedc000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1495.293417] name failslab, interval 1, probability 0, space 0, times 0
[ 1495.295485] CPU: 1 UID: 0 PID: 22896 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1495.295518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1495.295530] Call Trace:
[ 1495.295539]  <TASK>
[ 1495.295548]  dump_stack_lvl+0xfa/0x120
[ 1495.295581]  should_fail_ex+0x4d7/0x5e0
[ 1495.295610]  ? getname_flags.part.0+0x48/0x540
[ 1495.295635]  should_failslab+0xc2/0x120
18:08:53 executing program 2:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x1)
dup3(r1, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

[ 1495.295657]  kmem_cache_alloc_noprof+0x5f/0x470
[ 1495.295700]  getname_flags.part.0+0x48/0x540
[ 1495.295730]  getname_flags+0x95/0xe0
[ 1495.295763]  user_path_at+0x27/0x90
[ 1495.295796]  __x64_sys_mount+0x1e9/0x300
[ 1495.295834]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1495.295869]  ? lock_release+0xc8/0x290
[ 1495.295903]  do_syscall_64+0xbf/0x360
[ 1495.295934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.295956] RIP: 0033:0x7f4b2db30b19
[ 1495.295980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1495.296000] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1495.296021] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1495.296035] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1495.296048] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1495.296061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1495.296074] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1495.296108]  </TASK>
[ 1495.324679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1495.363591] 9pnet_fd: Insufficient options for proto=fd
18:08:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:08:53 executing program 4:
msgget$private(0x0, 0x0)
msgget(0x1, 0x410)
r0 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/128)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(0x0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:08:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 8)

18:08:53 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:08:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1495.476599] 9pnet_fd: Insufficient options for proto=fd
[ 1495.502229] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:08:53 executing program 4:
msgget$private(0x0, 0x0)
msgget(0x1, 0x410)
r0 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/128)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(0x0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1495.662376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 9)

18:09:04 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:09:04 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:09:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:04 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:04 executing program 4:
msgget$private(0x0, 0x0)
msgget(0x1, 0x410)
r0 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/128)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(0x0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x25}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:09:04 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:04 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:04 executing program 4:
msgget$private(0x0, 0x0)
msgget(0x1, 0x410)
r0 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
r1 = msgget$private(0x0, 0x20)
msgrcv(r1, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r1, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1506.454117] 9pnet_fd: Insufficient options for proto=fd
[ 1506.455489] FAULT_INJECTION: forcing a failure.
[ 1506.455489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1506.457095] CPU: 1 UID: 0 PID: 23132 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1506.457122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1506.457133] Call Trace:
[ 1506.457140]  <TASK>
[ 1506.457148]  dump_stack_lvl+0xfa/0x120
[ 1506.457180]  should_fail_ex+0x4d7/0x5e0
[ 1506.457207]  strncpy_from_user+0x3b/0x2f0
[ 1506.457240]  getname_flags.part.0+0x8d/0x540
[ 1506.457269]  getname_flags+0x95/0xe0
[ 1506.457297]  user_path_at+0x27/0x90
[ 1506.457327]  __x64_sys_mount+0x1e9/0x300
[ 1506.457360]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1506.457391]  ? lock_release+0xc8/0x290
[ 1506.457421]  do_syscall_64+0xbf/0x360
[ 1506.457448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.457469] RIP: 0033:0x7f4b2db30b19
[ 1506.457483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1506.457501] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1506.457519] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1506.457532] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1506.457544] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1506.457555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1506.457566] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1506.457594]  </TASK>
[ 1506.506931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:04 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xe0ffff00000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 10)

18:09:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:04 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1506.666961] FAULT_INJECTION: forcing a failure.
[ 1506.666961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1506.669025] CPU: 0 UID: 0 PID: 23217 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1506.669055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1506.669069] Call Trace:
[ 1506.669078]  <TASK>
[ 1506.669089]  dump_stack_lvl+0xfa/0x120
[ 1506.669126]  should_fail_ex+0x4d7/0x5e0
[ 1506.669159]  strncpy_from_user+0x3b/0x2f0
[ 1506.669206]  getname_flags.part.0+0x8d/0x540
[ 1506.669248]  getname_flags+0x95/0xe0
[ 1506.669284]  user_path_at+0x27/0x90
[ 1506.669323]  __x64_sys_mount+0x1e9/0x300
[ 1506.669367]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1506.669408]  ? lock_release+0xc8/0x290
[ 1506.669446]  do_syscall_64+0xbf/0x360
[ 1506.669483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1506.669512] RIP: 0033:0x7f4b2db30b19
[ 1506.669533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1506.669561] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1506.669586] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1506.669602] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1506.669616] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1506.669630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1506.669647] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1506.669687]  </TASK>
18:09:04 executing program 4:
msgget$private(0x0, 0x0)
msgget(0x1, 0x410)
msgget(0x0, 0x0)
r0 = msgget$private(0x0, 0x20)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1506.703391] 9pnet_fd: Insufficient options for proto=fd
18:09:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 11)

[ 1506.857523] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1506.859186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:16 executing program 1:
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:09:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x26}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:09:16 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:16 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:16 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:16 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:09:16 executing program 4:
msgget$private(0x0, 0x0)
msgget(0x1, 0x410)
r0 = msgget$private(0x0, 0x20)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:16 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 12)

18:09:16 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:16 executing program 1:
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:09:16 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:16 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1518.201696] FAULT_INJECTION: forcing a failure.
[ 1518.201696] name failslab, interval 1, probability 0, space 0, times 0
[ 1518.203432] CPU: 0 UID: 0 PID: 23276 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1518.203471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1518.203485] Call Trace:
[ 1518.203493]  <TASK>
[ 1518.203502]  dump_stack_lvl+0xfa/0x120
[ 1518.203537]  should_fail_ex+0x4d7/0x5e0
[ 1518.203566]  should_failslab+0xc2/0x120
[ 1518.203589]  __kmalloc_cache_noprof+0x73/0x470
[ 1518.203623]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1518.203651]  ? legacy_init_fs_context+0x44/0xe0
[ 1518.203692]  ? legacy_init_fs_context+0x44/0xe0
[ 1518.203721]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1518.203745]  legacy_init_fs_context+0x44/0xe0
[ 1518.203776]  ? __pfx_legacy_init_fs_context+0x10/0x10
[ 1518.203807]  alloc_fs_context+0x570/0x9e0
[ 1518.203848]  path_mount+0xab9/0x1d70
[ 1518.203887]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1518.203926]  ? __pfx_path_mount+0x10/0x10
[ 1518.203970]  ? kmem_cache_free+0x2a1/0x460
[ 1518.204003]  ? putname.part.0+0x11b/0x160
[ 1518.204033]  ? getname_flags.part.0+0x1c6/0x540
[ 1518.204064]  ? putname.part.0+0x11b/0x160
[ 1518.204095]  __x64_sys_mount+0x27b/0x300
[ 1518.204133]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1518.204183]  do_syscall_64+0xbf/0x360
[ 1518.204215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1518.204238] RIP: 0033:0x7f4b2db30b19
[ 1518.204255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1518.204276] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1518.204297] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1518.204312] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1518.204325] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1518.204339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1518.204352] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1518.204387]  </TASK>
[ 1518.238623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:16 executing program 4:
msgget$private(0x0, 0x0)
r0 = msgget$private(0x0, 0x20)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:16 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:16 executing program 1:
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:09:16 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:16 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 13)

18:09:16 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1518.582430] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
[ 1518.602840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:27 executing program 4:
r0 = msgget$private(0x0, 0x20)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x55}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:09:27 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 14)

18:09:27 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:27 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:09:27 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:09:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1529.191392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x500000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:27 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d6"}, 0x39, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1529.237196] FAULT_INJECTION: forcing a failure.
[ 1529.237196] name failslab, interval 1, probability 0, space 0, times 0
[ 1529.239153] CPU: 1 UID: 0 PID: 23420 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1529.239184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1529.239198] Call Trace:
[ 1529.239206]  <TASK>
[ 1529.239215]  dump_stack_lvl+0xfa/0x120
[ 1529.239250]  should_fail_ex+0x4d7/0x5e0
[ 1529.239280]  should_failslab+0xc2/0x120
[ 1529.239302]  __kmalloc_cache_noprof+0x73/0x470
[ 1529.239336]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1529.239372]  ? v9fs_mount+0x9d/0x9e0
[ 1529.239402]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[ 1529.239444]  ? v9fs_mount+0x9d/0x9e0
[ 1529.239472]  v9fs_mount+0x9d/0x9e0
[ 1529.239501]  ? __pfx_v9fs_mount+0x10/0x10
[ 1529.239533]  ? cap_capable+0xdb/0x3b0
[ 1529.239571]  ? __pfx_v9fs_mount+0x10/0x10
[ 1529.239600]  legacy_get_tree+0x109/0x220
[ 1529.239635]  vfs_get_tree+0x93/0x340
[ 1529.239666]  path_mount+0x122f/0x1d70
[ 1529.239705]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1529.239745]  ? __pfx_path_mount+0x10/0x10
[ 1529.239783]  ? kmem_cache_free+0x2a1/0x460
[ 1529.239817]  ? putname.part.0+0x11b/0x160
[ 1529.239843]  ? getname_flags.part.0+0x1c6/0x540
[ 1529.239874]  ? putname.part.0+0x11b/0x160
[ 1529.239905]  __x64_sys_mount+0x27b/0x300
[ 1529.239943]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1529.240001]  do_syscall_64+0xbf/0x360
[ 1529.240032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1529.240056] RIP: 0033:0x7f4b2db30b19
[ 1529.240074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1529.240096] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1529.240118] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1529.240133] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1529.240147] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1529.240161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1529.240174] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1529.240208]  </TASK>
[ 1529.242018] 9pnet_fd: Insufficient options for proto=fd
18:09:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x600000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:27 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d6"}, 0x39, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:27 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 15)

[ 1529.366437] 9pnet_fd: Insufficient options for proto=fd
18:09:27 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1529.483724] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
[ 1529.518098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:39 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:09:39 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = eventfd2(0x0, 0x1)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:39 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:39 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 16)

18:09:39 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d6"}, 0x39, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:39 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:39 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x60}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:09:39 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1541.350254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:39 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x900000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1541.366916] 9pnet_fd: Insufficient options for proto=fd
18:09:39 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1541.403784] FAULT_INJECTION: forcing a failure.
[ 1541.403784] name failslab, interval 1, probability 0, space 0, times 0
[ 1541.405599] CPU: 1 UID: 0 PID: 23561 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1541.405630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1541.405644] Call Trace:
[ 1541.405651]  <TASK>
[ 1541.405660]  dump_stack_lvl+0xfa/0x120
[ 1541.405695]  should_fail_ex+0x4d7/0x5e0
[ 1541.405724]  should_failslab+0xc2/0x120
[ 1541.405747]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1541.405781]  ? v9fs_mount+0x9d/0x9e0
[ 1541.405809]  ? legacy_get_tree+0x109/0x220
[ 1541.405839]  ? vfs_get_tree+0x93/0x340
[ 1541.405865]  ? path_mount+0x122f/0x1d70
[ 1541.405901]  ? __x64_sys_mount+0x27b/0x300
[ 1541.405936]  ? v9fs_session_init+0xaa/0x17a0
[ 1541.405957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1541.405996]  kstrdup+0x3e/0xc0
[ 1541.406032]  v9fs_session_init+0xaa/0x17a0
[ 1541.406055]  ? do_raw_spin_lock+0x123/0x260
[ 1541.406087]  ? find_held_lock+0x2b/0x80
[ 1541.406121]  ? __create_object+0x59/0x80
[ 1541.406150]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1541.406174]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1541.406198]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1541.406220]  ? __create_object+0x59/0x80
[ 1541.406249]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1541.406282]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1541.406330]  v9fs_mount+0xbc/0x9e0
[ 1541.406359]  ? __pfx_v9fs_mount+0x10/0x10
[ 1541.406391]  ? cap_capable+0xdb/0x3b0
[ 1541.406441]  ? __pfx_v9fs_mount+0x10/0x10
[ 1541.406470]  legacy_get_tree+0x109/0x220
[ 1541.406503]  vfs_get_tree+0x93/0x340
[ 1541.406533]  path_mount+0x122f/0x1d70
[ 1541.406572]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1541.406612]  ? __pfx_path_mount+0x10/0x10
[ 1541.406650]  ? kmem_cache_free+0x2a1/0x460
[ 1541.406683]  ? putname.part.0+0x11b/0x160
[ 1541.406709]  ? getname_flags.part.0+0x1c6/0x540
[ 1541.406740]  ? putname.part.0+0x11b/0x160
[ 1541.406771]  __x64_sys_mount+0x27b/0x300
[ 1541.406809]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1541.406859]  do_syscall_64+0xbf/0x360
[ 1541.406891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1541.406913] RIP: 0033:0x7f4b2db30b19
[ 1541.406931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1541.406953] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1541.406975] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1541.406990] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1541.407004] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1541.407018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1541.407031] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1541.407064]  </TASK>
[ 1541.447118] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:09:39 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:39 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:39 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:39 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853"}, 0x51, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:39 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1541.679341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:52 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xb00000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:52 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853"}, 0x51, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:52 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:09:52 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:09:52 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:09:52 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:09:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:09:52 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 17)

[ 1554.744449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1554.747225] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
18:09:53 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853"}, 0x51, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 18)

18:09:53 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1554.890771] FAULT_INJECTION: forcing a failure.
[ 1554.890771] name failslab, interval 1, probability 0, space 0, times 0
[ 1554.892802] CPU: 1 UID: 0 PID: 23726 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1554.892833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1554.892846] Call Trace:
[ 1554.892854]  <TASK>
[ 1554.892863]  dump_stack_lvl+0xfa/0x120
[ 1554.892898]  should_fail_ex+0x4d7/0x5e0
[ 1554.892928]  should_failslab+0xc2/0x120
[ 1554.892950]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1554.892992]  ? v9fs_mount+0x9d/0x9e0
[ 1554.893019]  ? legacy_get_tree+0x109/0x220
[ 1554.893048]  ? vfs_get_tree+0x93/0x340
[ 1554.893075]  ? __x64_sys_mount+0x200/0x300
[ 1554.893111]  ? v9fs_session_init+0xeb/0x17a0
[ 1554.893141]  kstrdup+0x3e/0xc0
[ 1554.893175]  v9fs_session_init+0xeb/0x17a0
[ 1554.893198]  ? do_raw_spin_lock+0x123/0x260
[ 1554.893232]  ? find_held_lock+0x2b/0x80
[ 1554.893264]  ? __create_object+0x59/0x80
[ 1554.893292]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1554.893316]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1554.893340]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1554.893361]  ? __create_object+0x59/0x80
[ 1554.893389]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1554.893421]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1554.893467]  v9fs_mount+0xbc/0x9e0
[ 1554.893495]  ? __pfx_v9fs_mount+0x10/0x10
[ 1554.893526]  ? cap_capable+0xdb/0x3b0
[ 1554.893563]  ? __pfx_v9fs_mount+0x10/0x10
[ 1554.893591]  legacy_get_tree+0x109/0x220
[ 1554.893624]  vfs_get_tree+0x93/0x340
[ 1554.893653]  path_mount+0x122f/0x1d70
[ 1554.893690]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1554.893729]  ? __pfx_path_mount+0x10/0x10
[ 1554.893765]  ? kmem_cache_free+0x2a1/0x460
[ 1554.893797]  ? putname.part.0+0x11b/0x160
[ 1554.893822]  ? getname_flags.part.0+0x1c6/0x540
[ 1554.893852]  ? putname.part.0+0x11b/0x160
[ 1554.893881]  __x64_sys_mount+0x27b/0x300
[ 1554.893919]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1554.893967]  do_syscall_64+0xbf/0x360
[ 1554.893998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1554.894021] RIP: 0033:0x7f4b2db30b19
[ 1554.894038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1554.894059] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1554.894080] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1554.894095] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1554.894109] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1554.894122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1554.894135] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1554.894167]  </TASK>
18:09:53 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b6"}, 0x5d, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:09:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1555.080191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:09:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x2010000000000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:09:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 19)

[ 1555.251889] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
[ 1561.996444] kworker/u10:4 (270) used greatest stack depth: 23776 bytes left
18:10:03 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
eventfd2(0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:10:03 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:10:03 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b6"}, 0x5d, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:10:03 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:10:03 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:10:03 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff00000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:03 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 20)

[ 1565.193827] FAULT_INJECTION: forcing a failure.
[ 1565.193827] name failslab, interval 1, probability 0, space 0, times 0
[ 1565.194783] CPU: 0 UID: 0 PID: 23833 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1565.194798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1565.194806] Call Trace:
[ 1565.194811]  <TASK>
[ 1565.194815]  dump_stack_lvl+0xfa/0x120
[ 1565.194837]  should_fail_ex+0x4d7/0x5e0
[ 1565.194854]  should_failslab+0xc2/0x120
[ 1565.194868]  __kmalloc_cache_noprof+0x73/0x470
[ 1565.194886]  ? p9_client_create+0xc0/0x11b0
[ 1565.194905]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1565.194923]  ? p9_client_create+0xc0/0x11b0
[ 1565.194940]  p9_client_create+0xc0/0x11b0
[ 1565.194963]  ? __create_object+0x59/0x80
[ 1565.194979]  ? __pfx_p9_client_create+0x10/0x10
[ 1565.194996]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1565.195019]  ? kasan_save_track+0x14/0x30
[ 1565.195031]  ? __kasan_kmalloc+0x7f/0x90
[ 1565.195043]  ? trace_kmalloc+0x1f/0xb0
[ 1565.195054]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[ 1565.195070]  ? v9fs_mount+0x9d/0x9e0
[ 1565.195085]  ? legacy_get_tree+0x109/0x220
[ 1565.195100]  ? vfs_get_tree+0x93/0x340
[ 1565.195115]  ? lockdep_init_map_type+0x4b/0x240
[ 1565.195130]  ? __raw_spin_lock_init+0x3a/0x110
[ 1565.195149]  v9fs_session_init+0x1df/0x17a0
[ 1565.195161]  ? do_raw_spin_lock+0x123/0x260
[ 1565.195178]  ? find_held_lock+0x2b/0x80
[ 1565.195194]  ? __create_object+0x59/0x80
[ 1565.195209]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1565.195222]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1565.195234]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1565.195246]  ? __create_object+0x59/0x80
[ 1565.195261]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1565.195278]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1565.195304]  v9fs_mount+0xbc/0x9e0
[ 1565.195319]  ? __pfx_v9fs_mount+0x10/0x10
[ 1565.195336]  ? cap_capable+0xdb/0x3b0
[ 1565.195356]  ? __pfx_v9fs_mount+0x10/0x10
[ 1565.195371]  legacy_get_tree+0x109/0x220
[ 1565.195389]  vfs_get_tree+0x93/0x340
[ 1565.195404]  path_mount+0x122f/0x1d70
[ 1565.195425]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1565.195445]  ? __pfx_path_mount+0x10/0x10
[ 1565.195464]  ? kmem_cache_free+0x2a1/0x460
[ 1565.195481]  ? putname.part.0+0x11b/0x160
[ 1565.195495]  ? getname_flags.part.0+0x1c6/0x540
[ 1565.195511]  ? putname.part.0+0x11b/0x160
[ 1565.195527]  __x64_sys_mount+0x27b/0x300
[ 1565.195547]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1565.195573]  do_syscall_64+0xbf/0x360
[ 1565.195590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1565.195603] RIP: 0033:0x7f4b2db30b19
[ 1565.195612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1565.195623] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1565.195634] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1565.195642] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1565.195649] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1565.195656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1565.195662] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1565.195681]  </TASK>
[ 1565.233098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:03 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff00000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:03 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x0, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:10:03 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b6"}, 0x5d, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:03 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 21)

18:10:03 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e"}, 0x63, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:03 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xf9fdffff00000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1565.425599] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
18:10:03 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:10:03 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1565.566811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:14 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 22)

18:10:14 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:10:14 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e"}, 0x63, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:14 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:10:14 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x22}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x4}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:10:14 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:10:14 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x0, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1576.126273] msdos: Unknown parameter 'umask"00000000000000000000000'
[ 1576.128355] msdos: Unknown parameter 'umask"00000000000000000000000'
18:10:14 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x2c}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1576.162201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1576.169230] FAULT_INJECTION: forcing a failure.
[ 1576.169230] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.170402] CPU: 1 UID: 0 PID: 24078 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1576.170422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1576.170431] Call Trace:
[ 1576.170436]  <TASK>
[ 1576.170443]  dump_stack_lvl+0xfa/0x120
[ 1576.170469]  should_fail_ex+0x4d7/0x5e0
[ 1576.170490]  should_failslab+0xc2/0x120
[ 1576.170506]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1576.170532]  ? p9_client_create+0x487/0x11b0
[ 1576.170559]  kstrdup+0x3e/0xc0
[ 1576.170583]  p9_client_create+0x487/0x11b0
[ 1576.170612]  ? __pfx_p9_client_create+0x10/0x10
[ 1576.170634]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1576.170661]  ? kasan_save_track+0x14/0x30
[ 1576.170676]  ? __kasan_kmalloc+0x7f/0x90
[ 1576.170691]  ? trace_kmalloc+0x1f/0xb0
[ 1576.170705]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[ 1576.170725]  ? v9fs_mount+0x9d/0x9e0
[ 1576.170744]  ? legacy_get_tree+0x109/0x220
[ 1576.170775]  ? vfs_get_tree+0x93/0x340
[ 1576.170794]  ? lockdep_init_map_type+0x4b/0x240
[ 1576.170813]  ? __raw_spin_lock_init+0x3a/0x110
[ 1576.170837]  v9fs_session_init+0x1df/0x17a0
[ 1576.170853]  ? do_raw_spin_lock+0x123/0x260
[ 1576.170874]  ? find_held_lock+0x2b/0x80
[ 1576.170896]  ? __create_object+0x59/0x80
[ 1576.170916]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1576.170932]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1576.170947]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1576.170967]  ? __create_object+0x59/0x80
[ 1576.170986]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1576.171017]  v9fs_mount+0xbc/0x9e0
[ 1576.171027] msdos: Bad value for 'umask'
[ 1576.171037]  ? __pfx_v9fs_mount+0x10/0x10
[ 1576.171058]  ? cap_capable+0xdb/0x3b0
[ 1576.171084]  ? __pfx_v9fs_mount+0x10/0x10
[ 1576.171103]  legacy_get_tree+0x109/0x220
[ 1576.171125]  vfs_get_tree+0x93/0x340
[ 1576.171144]  path_mount+0x122f/0x1d70
[ 1576.171170]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1576.171196]  ? __pfx_path_mount+0x10/0x10
[ 1576.171220]  ? kmem_cache_free+0x2a1/0x460
[ 1576.171242]  ? putname.part.0+0x11b/0x160
[ 1576.171259]  ? getname_flags.part.0+0x1c6/0x540
[ 1576.171279]  ? putname.part.0+0x11b/0x160
[ 1576.171300]  __x64_sys_mount+0x27b/0x300
[ 1576.171325]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1576.171358]  do_syscall_64+0xbf/0x360
[ 1576.171379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.171395] RIP: 0033:0x7f4b2db30b19
[ 1576.171407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1576.171421] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1576.171435] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1576.171445] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1576.171454] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1576.171463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1576.171471] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1576.171495]  </TASK>
18:10:14 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e"}, 0x63, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:14 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 23)

18:10:14 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x0, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1576.249707] msdos: Bad value for 'umask'
[ 1576.278491] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:10:14 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee29"}, 0x66, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:14 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x2}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:14 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 24)

18:10:14 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1576.351433] No source specified
[ 1576.353664] No source specified
[ 1576.363410] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
18:10:14 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x3}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:14 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

[ 1576.429045] No source specified
[ 1576.430503] No source specified
[ 1576.519855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:24 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee29"}, 0x66, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:24 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:10:24 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:10:24 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:10:24 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:10:24 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:10:24 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 25)

[ 1586.789169] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:10:25 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 26)

[ 1586.815892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.823317] No source specified
[ 1586.829254] No source specified
[ 1586.832815] FAULT_INJECTION: forcing a failure.
[ 1586.832815] name failslab, interval 1, probability 0, space 0, times 0
[ 1586.833752] CPU: 0 UID: 0 PID: 24328 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1586.833769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1586.833777] Call Trace:
[ 1586.833782]  <TASK>
[ 1586.833787]  dump_stack_lvl+0xfa/0x120
[ 1586.833808]  should_fail_ex+0x4d7/0x5e0
[ 1586.833824]  should_failslab+0xc2/0x120
[ 1586.833837]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1586.833856]  ? perf_trace_lock+0xb5/0x5d0
[ 1586.833870]  ? parse_opts.part.0+0x8d/0x340
[ 1586.833887]  kstrdup+0x3e/0xc0
[ 1586.833906]  parse_opts.part.0+0x8d/0x340
[ 1586.833918]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1586.833938]  ? __pfx_parse_opts.part.0+0x10/0x10
[ 1586.833950]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1586.833973]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1586.833992]  ? lock_release+0xc8/0x290
[ 1586.834013]  p9_fd_create+0x9b/0x530
[ 1586.834026]  ? __pfx_p9_fd_create+0x10/0x10
[ 1586.834038]  ? irq_entries_start+0x4/0xcb0
[ 1586.834050]  ? p9_client_create+0x784/0x11b0
[ 1586.834071]  p9_client_create+0x7eb/0x11b0
[ 1586.834093]  ? __pfx_p9_client_create+0x10/0x10
[ 1586.834110]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1586.834130]  ? kasan_save_track+0x14/0x30
[ 1586.834142]  ? __kasan_kmalloc+0x7f/0x90
[ 1586.834153]  ? trace_kmalloc+0x1f/0xb0
[ 1586.834165]  ? legacy_get_tree+0x109/0x220
[ 1586.834180]  ? vfs_get_tree+0x93/0x340
[ 1586.834195]  ? lockdep_init_map_type+0x4b/0x240
[ 1586.834209]  ? __raw_spin_lock_init+0x3a/0x110
[ 1586.834227]  v9fs_session_init+0x1df/0x17a0
[ 1586.834241]  ? do_raw_spin_lock+0x123/0x260
[ 1586.834257]  ? find_held_lock+0x2b/0x80
[ 1586.834274]  ? __create_object+0x59/0x80
[ 1586.834289]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1586.834302]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1586.834314]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1586.834325]  ? __create_object+0x59/0x80
[ 1586.834340]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1586.834357]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1586.834382]  v9fs_mount+0xbc/0x9e0
[ 1586.834398]  ? __pfx_v9fs_mount+0x10/0x10
[ 1586.834414]  ? cap_capable+0xdb/0x3b0
[ 1586.834434]  ? __pfx_v9fs_mount+0x10/0x10
[ 1586.834448]  legacy_get_tree+0x109/0x220
[ 1586.834465]  vfs_get_tree+0x93/0x340
[ 1586.834480]  path_mount+0x122f/0x1d70
[ 1586.834500]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1586.834520]  ? __pfx_path_mount+0x10/0x10
[ 1586.834539]  ? kmem_cache_free+0x2a1/0x460
[ 1586.834555]  ? putname.part.0+0x11b/0x160
[ 1586.834569]  ? getname_flags.part.0+0x1c6/0x540
[ 1586.834584]  ? putname.part.0+0x11b/0x160
[ 1586.834600]  __x64_sys_mount+0x27b/0x300
[ 1586.834619]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1586.834644]  do_syscall_64+0xbf/0x360
[ 1586.834660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.834672] RIP: 0033:0x7f4b2db30b19
[ 1586.834681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1586.834692] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1586.834703] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1586.834711] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1586.834718] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1586.834725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1586.834732] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1586.834750]  </TASK>
18:10:25 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 27)

18:10:25 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee29"}, 0x66, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:25 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1586.944932] FAULT_INJECTION: forcing a failure.
[ 1586.944932] name failslab, interval 1, probability 0, space 0, times 0
[ 1586.945907] CPU: 0 UID: 0 PID: 24429 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1586.945923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1586.945931] Call Trace:
[ 1586.945936]  <TASK>
[ 1586.945940]  dump_stack_lvl+0xfa/0x120
[ 1586.945964]  should_fail_ex+0x4d7/0x5e0
[ 1586.945980]  should_failslab+0xc2/0x120
[ 1586.945993]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1586.946012]  ? perf_trace_lock+0xb5/0x5d0
[ 1586.946026]  ? parse_opts.part.0+0x8d/0x340
[ 1586.946043]  kstrdup+0x3e/0xc0
[ 1586.946062]  parse_opts.part.0+0x8d/0x340
[ 1586.946075]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1586.946094]  ? __pfx_parse_opts.part.0+0x10/0x10
[ 1586.946106]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1586.946126]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1586.946144]  ? lock_release+0xc8/0x290
[ 1586.946166]  p9_fd_create+0x9b/0x530
[ 1586.946179]  ? __pfx_p9_fd_create+0x10/0x10
[ 1586.946191]  ? irq_entries_start+0x4/0xcb0
[ 1586.946204]  ? p9_client_create+0x784/0x11b0
[ 1586.946225]  p9_client_create+0x7eb/0x11b0
[ 1586.946246]  ? __pfx_p9_client_create+0x10/0x10
[ 1586.946263]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1586.946283]  ? kasan_save_track+0x14/0x30
[ 1586.946295]  ? __kasan_kmalloc+0x7f/0x90
[ 1586.946307]  ? trace_kmalloc+0x1f/0xb0
[ 1586.946319]  ? legacy_get_tree+0x109/0x220
[ 1586.946335]  ? vfs_get_tree+0x93/0x340
[ 1586.946349]  ? lockdep_init_map_type+0x4b/0x240
[ 1586.946363]  ? __raw_spin_lock_init+0x3a/0x110
[ 1586.946381]  v9fs_session_init+0x1df/0x17a0
[ 1586.946395]  ? do_raw_spin_lock+0x123/0x260
[ 1586.946410]  ? find_held_lock+0x2b/0x80
[ 1586.946427]  ? __create_object+0x59/0x80
[ 1586.946442]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1586.946455]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1586.946467]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1586.946478]  ? __create_object+0x59/0x80
[ 1586.946493]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1586.946509]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1586.946534]  v9fs_mount+0xbc/0x9e0
[ 1586.946550]  ? __pfx_v9fs_mount+0x10/0x10
[ 1586.946566]  ? cap_capable+0xdb/0x3b0
[ 1586.946586]  ? __pfx_v9fs_mount+0x10/0x10
[ 1586.946600]  legacy_get_tree+0x109/0x220
[ 1586.946617]  vfs_get_tree+0x93/0x340
[ 1586.946635]  path_mount+0x122f/0x1d70
[ 1586.946658]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1586.946677]  ? __pfx_path_mount+0x10/0x10
[ 1586.946696]  ? kmem_cache_free+0x2a1/0x460
[ 1586.946713]  ? putname.part.0+0x11b/0x160
[ 1586.946727]  ? getname_flags.part.0+0x1c6/0x540
[ 1586.946742]  ? putname.part.0+0x11b/0x160
[ 1586.946758]  __x64_sys_mount+0x27b/0x300
[ 1586.946777]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1586.946802]  do_syscall_64+0xbf/0x360
[ 1586.946818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.946830] RIP: 0033:0x7f4b2db30b19
[ 1586.946839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1586.946850] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1586.946862] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1586.946877] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1586.946885] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1586.946892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1586.946898] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1586.946915]  </TASK>
[ 1586.978194] No source specified
[ 1586.986567] No source specified
18:10:25 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 28)

[ 1587.056696] FAULT_INJECTION: forcing a failure.
[ 1587.056696] name failslab, interval 1, probability 0, space 0, times 0
[ 1587.057755] CPU: 0 UID: 0 PID: 24436 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1587.057772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1587.057779] Call Trace:
[ 1587.057783]  <TASK>
[ 1587.057788]  dump_stack_lvl+0xfa/0x120
[ 1587.057808]  should_fail_ex+0x4d7/0x5e0
[ 1587.057824]  should_failslab+0xc2/0x120
[ 1587.057837]  __kmalloc_cache_noprof+0x73/0x470
[ 1587.057854]  ? p9_fd_create+0x17e/0x530
[ 1587.057871]  ? p9_fd_create+0x17e/0x530
[ 1587.057883]  p9_fd_create+0x17e/0x530
[ 1587.057896]  ? __pfx_p9_fd_create+0x10/0x10
[ 1587.057908]  ? irq_entries_start+0x4/0xcb0
[ 1587.057921]  ? p9_client_create+0x784/0x11b0
[ 1587.057942]  p9_client_create+0x7eb/0x11b0
[ 1587.057968]  ? __pfx_p9_client_create+0x10/0x10
[ 1587.057985]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1587.058006]  ? kasan_save_track+0x14/0x30
[ 1587.058018]  ? __kasan_kmalloc+0x7f/0x90
[ 1587.058029]  ? trace_kmalloc+0x1f/0xb0
[ 1587.058041]  ? legacy_get_tree+0x109/0x220
[ 1587.058057]  ? vfs_get_tree+0x93/0x340
[ 1587.058072]  ? lockdep_init_map_type+0x4b/0x240
[ 1587.058087]  ? __raw_spin_lock_init+0x3a/0x110
[ 1587.058105]  v9fs_session_init+0x1df/0x17a0
[ 1587.058119]  ? do_raw_spin_lock+0x123/0x260
[ 1587.058135]  ? find_held_lock+0x2b/0x80
[ 1587.058152]  ? __create_object+0x59/0x80
[ 1587.058167]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1587.058179]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1587.058192]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1587.058203]  ? __create_object+0x59/0x80
[ 1587.058222]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1587.058238]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1587.058263]  v9fs_mount+0xbc/0x9e0
[ 1587.058279]  ? __pfx_v9fs_mount+0x10/0x10
[ 1587.058295]  ? cap_capable+0xdb/0x3b0
[ 1587.058315]  ? __pfx_v9fs_mount+0x10/0x10
[ 1587.058330]  legacy_get_tree+0x109/0x220
[ 1587.058347]  vfs_get_tree+0x93/0x340
[ 1587.058362]  path_mount+0x122f/0x1d70
[ 1587.058382]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1587.058401]  ? __pfx_path_mount+0x10/0x10
[ 1587.058420]  ? kmem_cache_free+0x2a1/0x460
[ 1587.058437]  ? putname.part.0+0x11b/0x160
[ 1587.058450]  ? getname_flags.part.0+0x1c6/0x540
[ 1587.058466]  ? putname.part.0+0x11b/0x160
[ 1587.058481]  __x64_sys_mount+0x27b/0x300
[ 1587.058501]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1587.058526]  do_syscall_64+0xbf/0x360
[ 1587.058542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1587.058554] RIP: 0033:0x7f4b2db30b19
[ 1587.058563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1587.058574] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1587.058586] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1587.058594] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1587.058601] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1587.058608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1587.058614] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1587.058631]  </TASK>
[ 1587.183560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:35 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:10:35 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, 0xffffffffffffffff, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:10:35 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 29)

18:10:35 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x6}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:35 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:10:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:10:35 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:10:35 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e21"}, 0x68, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1596.927179] No source specified
[ 1596.928863] No source specified
[ 1596.959029] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1596.964690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:35 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1597.003797] No source specified
[ 1597.005880] No source specified
18:10:35 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e21"}, 0x68, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:35 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 30)

18:10:35 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x8}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1597.083243] FAULT_INJECTION: forcing a failure.
[ 1597.083243] name failslab, interval 1, probability 0, space 0, times 0
[ 1597.084312] CPU: 0 UID: 0 PID: 24469 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1597.084329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1597.084337] Call Trace:
[ 1597.084341]  <TASK>
[ 1597.084346]  dump_stack_lvl+0xfa/0x120
[ 1597.084367]  should_fail_ex+0x4d7/0x5e0
[ 1597.084383]  ? p9_tag_alloc+0x9b/0x820
[ 1597.084401]  should_failslab+0xc2/0x120
[ 1597.084414]  kmem_cache_alloc_noprof+0x5f/0x470
[ 1597.084432]  ? look_up_lock_class+0x56/0x150
[ 1597.084445]  ? stack_trace_save+0x8e/0xc0
[ 1597.084464]  p9_tag_alloc+0x9b/0x820
[ 1597.084484]  ? __pfx_p9_tag_alloc+0x10/0x10
[ 1597.084503]  ? __mmu_notifier_subscriptions_destroy+0xb0/0xc0
[ 1597.084519]  ? perf_trace_lock+0xb5/0x5d0
[ 1597.084533]  ? path_mount+0x122f/0x1d70
[ 1597.084558]  p9_client_prepare_req+0x17f/0x460
[ 1597.084578]  ? __pfx_p9_client_prepare_req+0x10/0x10
[ 1597.084599]  ? find_held_lock+0x2b/0x80
[ 1597.084617]  ? p9_pollwait+0x1ab/0x210
[ 1597.084633]  p9_client_rpc+0x1a0/0xba0
[ 1597.084654]  ? __pfx_p9_client_rpc+0x10/0x10
[ 1597.084673]  ? eventfd_poll+0x114/0x150
[ 1597.084690]  ? __pfx_eventfd_poll+0x10/0x10
[ 1597.084708]  ? p9_fd_poll+0x1e0/0x2c0
[ 1597.084723]  ? p9_fd_create+0x34e/0x530
[ 1597.084737]  ? __pfx_p9_fd_create+0x10/0x10
[ 1597.084752]  ? p9_client_create+0x784/0x11b0
[ 1597.084773]  p9_client_create+0xbd1/0x11b0
[ 1597.084797]  ? __pfx_p9_client_create+0x10/0x10
[ 1597.084815]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1597.084838]  ? kasan_save_track+0x14/0x30
[ 1597.084850]  ? __kasan_kmalloc+0x7f/0x90
[ 1597.084862]  ? trace_kmalloc+0x1f/0xb0
[ 1597.084875]  ? legacy_get_tree+0x109/0x220
[ 1597.084891]  ? vfs_get_tree+0x93/0x340
[ 1597.084907]  ? lockdep_init_map_type+0x4b/0x240
[ 1597.084922]  ? __raw_spin_lock_init+0x3a/0x110
[ 1597.084942]  v9fs_session_init+0x1df/0x17a0
[ 1597.084959]  ? do_raw_spin_lock+0x123/0x260
[ 1597.084977]  ? find_held_lock+0x2b/0x80
[ 1597.084995]  ? __create_object+0x59/0x80
[ 1597.085013]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1597.085026]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1597.085039]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1597.085052]  ? __create_object+0x59/0x80
[ 1597.085049] No source specified
[ 1597.085068]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1597.085087]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1597.085114]  v9fs_mount+0xbc/0x9e0
[ 1597.085130]  ? __pfx_v9fs_mount+0x10/0x10
[ 1597.085147]  ? cap_capable+0xdb/0x3b0
[ 1597.085169]  ? __pfx_v9fs_mount+0x10/0x10
[ 1597.085184]  legacy_get_tree+0x109/0x220
[ 1597.085203]  vfs_get_tree+0x93/0x340
[ 1597.085219]  path_mount+0x122f/0x1d70
[ 1597.085239]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1597.085260]  ? __pfx_path_mount+0x10/0x10
[ 1597.085281]  ? kmem_cache_free+0x2a1/0x460
[ 1597.085299]  ? putname.part.0+0x11b/0x160
[ 1597.085314]  ? getname_flags.part.0+0x1c6/0x540
[ 1597.085330]  ? putname.part.0+0x11b/0x160
[ 1597.085347]  __x64_sys_mount+0x27b/0x300
[ 1597.085368]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1597.085395]  do_syscall_64+0xbf/0x360
[ 1597.085412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1597.085426] RIP: 0033:0x7f4b2db30b19
[ 1597.085435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1597.085448] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1597.085460] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1597.085468] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1597.085475] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1597.085483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1597.085490] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1597.085507]  </TASK>
[ 1597.144791] No source specified
18:10:35 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 31)

18:10:35 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e21"}, 0x68, 0x800)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1597.192085] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0)
18:10:35 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x9}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1597.233653] No source specified
[ 1597.235885] No source specified
[ 1597.345688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

18:10:45 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(0x0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:10:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:10:45 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:10:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 32)

18:10:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xa}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:10:45 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 1607.267095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1607.281638] FAULT_INJECTION: forcing a failure.
[ 1607.281638] name failslab, interval 1, probability 0, space 0, times 0
[ 1607.282654] CPU: 1 UID: 0 PID: 24585 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1607.282669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1607.282677] Call Trace:
[ 1607.282682]  <TASK>
[ 1607.282686]  dump_stack_lvl+0xfa/0x120
[ 1607.282706]  should_fail_ex+0x4d7/0x5e0
[ 1607.282722]  ? p9_fcall_init+0x97/0x290
[ 1607.282737]  should_failslab+0xc2/0x120
[ 1607.282750]  __kmalloc_noprof+0xb4/0x4b0
[ 1607.282766]  ? __create_object+0x59/0x80
[ 1607.282785]  p9_fcall_init+0x97/0x290
[ 1607.282802]  p9_tag_alloc+0x169/0x820
[ 1607.282821]  ? __pfx_p9_tag_alloc+0x10/0x10
[ 1607.282840]  ? perf_trace_lock+0xb5/0x5d0
[ 1607.282854]  ? path_mount+0x122f/0x1d70
[ 1607.282877]  p9_client_prepare_req+0x17f/0x460
[ 1607.282895]  ? __pfx_p9_client_prepare_req+0x10/0x10
[ 1607.282915]  ? find_held_lock+0x2b/0x80
[ 1607.282932]  ? p9_pollwait+0x1ab/0x210
[ 1607.282947]  p9_client_rpc+0x1a0/0xba0
[ 1607.282971]  ? __pfx_p9_client_rpc+0x10/0x10
[ 1607.282988]  ? eventfd_poll+0x114/0x150
[ 1607.283004]  ? __pfx_eventfd_poll+0x10/0x10
[ 1607.283020]  ? p9_fd_poll+0x1e0/0x2c0
[ 1607.283035]  ? p9_fd_create+0x34e/0x530
[ 1607.283048]  ? __pfx_p9_fd_create+0x10/0x10
[ 1607.283062]  ? p9_client_create+0x784/0x11b0
[ 1607.283091]  p9_client_create+0xbd1/0x11b0
[ 1607.283113]  ? __pfx_p9_client_create+0x10/0x10
[ 1607.283130]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1607.283152]  ? kasan_save_track+0x14/0x30
[ 1607.283163]  ? __kasan_kmalloc+0x7f/0x90
[ 1607.283175]  ? trace_kmalloc+0x1f/0xb0
[ 1607.283187]  ? legacy_get_tree+0x109/0x220
[ 1607.283202]  ? vfs_get_tree+0x93/0x340
[ 1607.283216]  ? lockdep_init_map_type+0x4b/0x240
[ 1607.283231]  ? __raw_spin_lock_init+0x3a/0x110
[ 1607.283249]  v9fs_session_init+0x1df/0x17a0
[ 1607.283262]  ? do_raw_spin_lock+0x123/0x260
[ 1607.283278]  ? find_held_lock+0x2b/0x80
[ 1607.283295]  ? __create_object+0x59/0x80
[ 1607.283309]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1607.283322]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1607.283334]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1607.283346]  ? __create_object+0x59/0x80
[ 1607.283360]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1607.283377]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1607.283402]  v9fs_mount+0xbc/0x9e0
[ 1607.283417]  ? __pfx_v9fs_mount+0x10/0x10
[ 1607.283433]  ? cap_capable+0xdb/0x3b0
[ 1607.283453]  ? __pfx_v9fs_mount+0x10/0x10
[ 1607.283467]  legacy_get_tree+0x109/0x220
[ 1607.283484]  vfs_get_tree+0x93/0x340
[ 1607.283499]  path_mount+0x122f/0x1d70
[ 1607.283519]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1607.283538]  ? __pfx_path_mount+0x10/0x10
[ 1607.283557]  ? kmem_cache_free+0x2a1/0x460
[ 1607.283574]  ? putname.part.0+0x11b/0x160
[ 1607.283587]  ? getname_flags.part.0+0x1c6/0x540
[ 1607.283603]  ? putname.part.0+0x11b/0x160
[ 1607.283619]  __x64_sys_mount+0x27b/0x300
[ 1607.283638]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1607.283663]  do_syscall_64+0xbf/0x360
[ 1607.283679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.283692] RIP: 0033:0x7f4b2db30b19
[ 1607.283701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1607.283713] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1607.283724] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1607.283732] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1607.283739] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1607.283745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1607.283752] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1607.283769]  </TASK>
[ 1607.347016] No source specified
[ 1607.348629] No source specified
18:10:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1607.355831] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:10:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xb}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:10:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 33)

18:10:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x3000)

[ 1607.466909] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0)
18:10:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x3000)

18:10:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 34)

[ 1607.512281] No source specified
[ 1607.518556] No source specified
[ 1607.545553] FAULT_INJECTION: forcing a failure.
[ 1607.545553] name failslab, interval 1, probability 0, space 0, times 0
[ 1607.546597] CPU: 1 UID: 0 PID: 24711 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1607.546613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1607.546621] Call Trace:
[ 1607.546626]  <TASK>
[ 1607.546630]  dump_stack_lvl+0xfa/0x120
[ 1607.546651]  should_fail_ex+0x4d7/0x5e0
[ 1607.546667]  ? p9_fcall_init+0x97/0x290
[ 1607.546683]  should_failslab+0xc2/0x120
[ 1607.546696]  __kmalloc_noprof+0xb4/0x4b0
[ 1607.546712]  ? __create_object+0x59/0x80
[ 1607.546731]  p9_fcall_init+0x97/0x290
[ 1607.546749]  p9_tag_alloc+0x20a/0x820
[ 1607.546767]  ? __pfx_p9_tag_alloc+0x10/0x10
[ 1607.546787]  ? perf_trace_lock+0xb5/0x5d0
[ 1607.546800]  ? path_mount+0x122f/0x1d70
[ 1607.546823]  p9_client_prepare_req+0x17f/0x460
[ 1607.546842]  ? __pfx_p9_client_prepare_req+0x10/0x10
[ 1607.546861]  ? find_held_lock+0x2b/0x80
[ 1607.546878]  ? p9_pollwait+0x1ab/0x210
[ 1607.546893]  p9_client_rpc+0x1a0/0xba0
[ 1607.546913]  ? __pfx_p9_client_rpc+0x10/0x10
[ 1607.546930]  ? eventfd_poll+0x114/0x150
[ 1607.546946]  ? __pfx_eventfd_poll+0x10/0x10
[ 1607.546966]  ? p9_fd_poll+0x1e0/0x2c0
[ 1607.546981]  ? p9_fd_create+0x34e/0x530
[ 1607.546994]  ? __pfx_p9_fd_create+0x10/0x10
[ 1607.547007]  ? p9_client_create+0x784/0x11b0
[ 1607.547028]  p9_client_create+0xbd1/0x11b0
[ 1607.547050]  ? __pfx_p9_client_create+0x10/0x10
[ 1607.547066]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1607.547103]  ? kasan_save_track+0x14/0x30
[ 1607.547115]  ? __kasan_kmalloc+0x7f/0x90
[ 1607.547126]  ? trace_kmalloc+0x1f/0xb0
[ 1607.547138]  ? legacy_get_tree+0x109/0x220
[ 1607.547154]  ? vfs_get_tree+0x93/0x340
[ 1607.547168]  ? lockdep_init_map_type+0x4b/0x240
[ 1607.547182]  ? __raw_spin_lock_init+0x3a/0x110
[ 1607.547200]  v9fs_session_init+0x1df/0x17a0
[ 1607.547213]  ? do_raw_spin_lock+0x123/0x260
[ 1607.547229]  ? find_held_lock+0x2b/0x80
[ 1607.547245]  ? __create_object+0x59/0x80
[ 1607.547260]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1607.547272]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1607.547284]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1607.547296]  ? __create_object+0x59/0x80
[ 1607.547310]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1607.547327]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1607.547351]  v9fs_mount+0xbc/0x9e0
[ 1607.547367]  ? __pfx_v9fs_mount+0x10/0x10
[ 1607.547383]  ? cap_capable+0xdb/0x3b0
[ 1607.547403]  ? __pfx_v9fs_mount+0x10/0x10
[ 1607.547417]  legacy_get_tree+0x109/0x220
[ 1607.547434]  vfs_get_tree+0x93/0x340
[ 1607.547449]  path_mount+0x122f/0x1d70
[ 1607.547468]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1607.547488]  ? __pfx_path_mount+0x10/0x10
[ 1607.547507]  ? kmem_cache_free+0x2a1/0x460
[ 1607.547523]  ? putname.part.0+0x11b/0x160
[ 1607.547537]  ? getname_flags.part.0+0x1c6/0x540
[ 1607.547552]  ? putname.part.0+0x11b/0x160
[ 1607.547568]  __x64_sys_mount+0x27b/0x300
[ 1607.547587]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1607.547612]  do_syscall_64+0xbf/0x360
[ 1607.547629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.547641] RIP: 0033:0x7f4b2db30b19
[ 1607.547651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1607.547662] RSP: 002b:00007f4b2b0a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1607.547673] RAX: ffffffffffffffda RBX: 00007f4b2dc43f60 RCX: 00007f4b2db30b19
[ 1607.547681] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1607.547688] RBP: 00007f4b2b0a61d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1607.547695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1607.547702] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1607.547719]  </TASK>
18:10:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1607.623276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:56 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(0x0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:10:56 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x3000)

18:10:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x10}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:56 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:10:56 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:10:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 35)

18:10:56 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xc}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:10:56 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1618.026078] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0)
[ 1618.072256] No source specified
[ 1618.080484] No source specified
18:10:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 36)

[ 1618.098248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:10:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x300}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:56 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x3000)

18:10:56 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1618.230539] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1618.245389] No source specified
[ 1618.251830] No source specified
18:10:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 37)

18:10:56 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:10:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x500}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:10:56 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x0, 0x3000)

[ 1618.413355] No source specified
[ 1618.416647] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0)
[ 1618.418581] No source specified
[ 1618.422724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:11:07 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:11:07 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(0x0, &(0x7f0000000100)={0x1, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:11:07 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 38)

18:11:07 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:11:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x10}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:11:07 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:11:07 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x600}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:07 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x0, 0x3000)

[ 1628.972801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1628.980397] No source specified
[ 1628.984389] No source specified
18:11:07 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x700}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1629.024924] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0)
18:11:07 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:11:07 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

18:11:07 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x0, 0x3000)

18:11:07 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 39)

[ 1629.109832] No source specified
[ 1629.124775] No source specified
18:11:07 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:11:07 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

18:11:07 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:11:07 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x900}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1629.226309] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:0)
18:11:07 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

[ 1629.312741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.316092] No source specified
[ 1629.331873] No source specified
18:11:18 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, 0x0, 0x0, 0x800)

18:11:18 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:11:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xa00}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:18 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x3000)

18:11:18 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

18:11:18 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:11:18 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 40)

18:11:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x1b}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

[ 1640.244575] No source specified
[ 1640.250371] No source specified
[ 1640.283495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:11:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xb00}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1640.330845] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
[ 1640.339860] No source specified
[ 1640.345828] No source specified
18:11:18 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x3000)

18:11:18 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:11:18 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 41)

18:11:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x1020}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:18 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1640.456503] No source specified
[ 1640.459615] No source specified
18:11:18 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x3000)

18:11:18 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1640.505130] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
18:11:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x2000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1640.531502] 9pnet_fd: Insufficient options for proto=fd
[ 1640.567271] No source specified
[ 1640.570746] No source specified
[ 1640.613515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:11:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

18:11:27 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 42)

18:11:27 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, 0x0, 0x0, 0x800)

18:11:27 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x0, 0x3000)

18:11:27 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:11:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x2010}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x1d}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:11:27 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

[ 1649.226254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1649.259883] 9pnet_fd: Insufficient options for proto=fd
[ 1649.277657] No source specified
[ 1649.284349] No source specified
18:11:27 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

[ 1649.297586] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:11:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

18:11:27 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x0, 0x3000)

18:11:27 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 43)

18:11:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xedc0}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1649.416098] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1649.430354] No source specified
[ 1649.431723] 9pnet_fd: Insufficient options for proto=fd
[ 1649.435336] No source specified
18:11:27 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 44)

18:11:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x80000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1649.508846] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1649.509948] FAULT_INJECTION: forcing a failure.
[ 1649.509948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1649.511103] CPU: 0 UID: 0 PID: 25416 Comm: syz-executor.3 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1649.511121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1649.511129] Call Trace:
[ 1649.511133]  <TASK>
[ 1649.511138]  dump_stack_lvl+0xfa/0x120
[ 1649.511161]  should_fail_ex+0x4d7/0x5e0
[ 1649.511179]  _copy_to_user+0x32/0xd0
[ 1649.511200]  simple_read_from_buffer+0xe0/0x180
[ 1649.511219]  proc_fail_nth_read+0x189/0x270
[ 1649.511240]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1649.511259]  ? security_file_permission+0x22/0x90
[ 1649.511274]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1649.511292]  vfs_read+0x1eb/0xbe0
[ 1649.511315]  ? __pfx_vfs_read+0x10/0x10
[ 1649.511333]  ? lock_release+0xc8/0x290
[ 1649.511350]  ? __fget_files+0x20d/0x3b0
[ 1649.511377]  ksys_read+0x121/0x240
[ 1649.511394]  ? __pfx_ksys_read+0x10/0x10
[ 1649.511417]  do_syscall_64+0xbf/0x360
[ 1649.511435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1649.511448] RIP: 0033:0x7f4b2dae369c
[ 1649.511458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1649.511469] RSP: 002b:00007f4b2b0a6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1649.511481] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f4b2dae369c
[ 1649.511489] RDX: 000000000000000f RSI: 00007f4b2b0a61e0 RDI: 0000000000000007
[ 1649.511497] RBP: 00007f4b2b0a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 1649.511515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1649.511523] R13: 00007ffe376ec11f R14: 00007f4b2b0a6300 R15: 0000000000022000
[ 1649.511540]  </TASK>
[ 1649.533342] No source specified
[ 1649.536332] No source specified
[ 1649.547760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:11:38 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, 0x0, 0x0, 0x800)

18:11:38 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x0, 0x3000)

18:11:38 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:11:38 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:11:38 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000180)={0x1, "3885d26e5dabca00a43357950e68673134b3bda65bbfcd6cd213d83c4837f856a12b055b0ad33e52a0e8916776968335d67b7a04d835eccdbbdaabce81ac154c405f4aef1b803a7853ecbec8c07d008af7ac5ed6b69b4a352f888e45ee292e2124"}, 0x69, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:11:38 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}})

18:11:38 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xa0000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x25}, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

[ 1660.114408] No source specified
[ 1660.121409] 9pnet_fd: Insufficient options for proto=fd
[ 1660.122858] No source specified
[ 1660.124747] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1660.128486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:11:38 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x0)

18:11:38 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:11:38 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xe0ffff}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:38 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:11:38 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}})

18:11:38 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

[ 1660.321345] No source specified
[ 1660.328921] No source specified
[ 1660.347573] 9pnet_fd: Insufficient options for proto=fd
18:11:38 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x1000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1660.458504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1660.501558] No source specified
[ 1660.505197] No source specified
18:11:50 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:11:50 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:11:50 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x0)

18:11:50 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x180)

18:11:50 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}})

18:11:50 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:11:50 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x2000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:50 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x0, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:11:50 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1672.598667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1672.618950] No source specified
18:11:50 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1672.630825] No source specified
[ 1672.637662] 9pnet_fd: Insufficient options for proto=fd
18:11:50 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x3000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:11:50 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 1)

18:11:50 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1672.760267] No source specified
[ 1672.763946] No source specified
[ 1672.921315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:12:00 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 2)

18:12:00 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x0, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:12:00 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:12:00 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:12:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x900)

18:12:00 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x9, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:00 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x0)

18:12:00 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x4000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1682.612294] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
[ 1682.614409] No source specified
[ 1682.624408] No source specified
18:12:00 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 3)

18:12:00 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:00 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x5000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1682.734355] No source specified
18:12:00 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1682.741688] No source specified
18:12:01 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x6000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1682.773449] FAULT_INJECTION: forcing a failure.
[ 1682.773449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1682.775512] CPU: 0 UID: 0 PID: 25787 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1682.775545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1682.775559] Call Trace:
[ 1682.775567]  <TASK>
[ 1682.775576]  dump_stack_lvl+0xfa/0x120
[ 1682.775613]  should_fail_ex+0x4d7/0x5e0
[ 1682.775643]  _copy_from_user+0x30/0xd0
[ 1682.775679]  memdup_user+0x7e/0xe0
[ 1682.775717]  strndup_user+0x78/0xe0
[ 1682.775754]  __x64_sys_mount+0x136/0x300
[ 1682.775796]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1682.775834]  ? lock_release+0xc8/0x290
[ 1682.775889]  do_syscall_64+0xbf/0x360
[ 1682.775921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1682.775946] RIP: 0033:0x7fb9c1c2fb19
[ 1682.775970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1682.775992] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1682.776015] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1682.776031] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1682.776046] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1682.776061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1682.776075] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1682.776109]  </TASK>
[ 1682.793405] No source specified
[ 1682.809276] No source specified
18:12:01 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x7000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:01 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:01 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 4)

[ 1682.899321] No source specified
[ 1682.901719] No source specified
18:12:01 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1682.952876] FAULT_INJECTION: forcing a failure.
[ 1682.952876] name failslab, interval 1, probability 0, space 0, times 0
[ 1682.954905] CPU: 0 UID: 0 PID: 25897 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1682.954937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1682.954951] Call Trace:
[ 1682.954965]  <TASK>
[ 1682.954974]  dump_stack_lvl+0xfa/0x120
[ 1682.955012]  should_fail_ex+0x4d7/0x5e0
[ 1682.955042]  should_failslab+0xc2/0x120
[ 1682.955065]  __kmalloc_cache_noprof+0x73/0x470
[ 1682.955097]  ? __might_fault+0xe0/0x190
[ 1682.955125]  ? copy_mount_options+0x55/0x180
[ 1682.955157]  ? copy_mount_options+0x55/0x180
[ 1682.955180]  ? memdup_user+0x95/0xe0
[ 1682.955215]  copy_mount_options+0x55/0x180
[ 1682.955243]  __x64_sys_mount+0x1ab/0x300
[ 1682.955283]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1682.955321]  ? lock_release+0xc8/0x290
[ 1682.955357]  do_syscall_64+0xbf/0x360
[ 1682.955390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1682.955414] RIP: 0033:0x7fb9c1c2fb19
[ 1682.955432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1682.955454] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1682.955477] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1682.955493] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1682.955508] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1682.955522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1682.955536] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1682.955571]  </TASK>
18:12:11 executing program 7:
msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:12:11 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 5)

18:12:11 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x0, "334477289e595b0fc5df6bb20d5a09d3611b36c35c92ce9c1af9eac758b842e4c580cfe08550e7a231f863bc2347a55489c48985ba76d6c03d2a43a5700485b79efe88127a0cb7"}, 0x4f, 0x800)

18:12:11 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:11 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:12:11 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x180)

18:12:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@bar={{}, {0x9}, @broadcast, @device_b, @basic={{0x1}, {0xd}}}, 0x14)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0xae, 0x1f, 0x6, 0x0, 0x90c, 0x800, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x5, @perf_config_ext={0x2, 0x1}, 0x804c, 0xfffffffffffffffe, 0x5d, 0x2, 0x8, 0x100, 0x1, 0x0, 0x3, 0x0, 0x6}, r1, 0x10, 0xffffffffffffffff, 0x1)

18:12:11 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x8000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:11 executing program 7:
msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

[ 1693.015050] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1693.015814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1693.039944] No source specified
[ 1693.056643] No source specified
18:12:11 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 6)

18:12:11 executing program 7:
msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:12:11 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x300, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1693.122860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:12:11 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x9000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1693.155906] FAULT_INJECTION: forcing a failure.
[ 1693.155906] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1693.156842] CPU: 0 UID: 0 PID: 25961 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1693.156862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1693.156876] Call Trace:
[ 1693.156881]  <TASK>
[ 1693.156886]  dump_stack_lvl+0xfa/0x120
[ 1693.156909]  should_fail_ex+0x4d7/0x5e0
[ 1693.156929]  _copy_from_user+0x30/0xd0
[ 1693.156948]  copy_mount_options+0x76/0x180
[ 1693.156968]  __x64_sys_mount+0x1ab/0x300
[ 1693.156989]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1693.157008]  ? lock_release+0xc8/0x290
[ 1693.157027]  do_syscall_64+0xbf/0x360
[ 1693.157045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1693.157058] RIP: 0033:0x7fb9c1c2fb19
[ 1693.157068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1693.157080] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1693.157092] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1693.157100] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1693.157108] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1693.157116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1693.157123] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1693.157141]  </TASK>
18:12:11 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

[ 1693.195502] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:12:11 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 7)

[ 1693.283859] No source specified
[ 1693.292289] No source specified
[ 1693.294740] FAULT_INJECTION: forcing a failure.
[ 1693.294740] name failslab, interval 1, probability 0, space 0, times 0
[ 1693.295658] CPU: 0 UID: 0 PID: 26040 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1693.295675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1693.295683] Call Trace:
[ 1693.295688]  <TASK>
[ 1693.295693]  dump_stack_lvl+0xfa/0x120
[ 1693.295715]  should_fail_ex+0x4d7/0x5e0
[ 1693.295733]  ? getname_flags.part.0+0x48/0x540
[ 1693.295750]  should_failslab+0xc2/0x120
[ 1693.295762]  kmem_cache_alloc_noprof+0x5f/0x470
[ 1693.295787]  getname_flags.part.0+0x48/0x540
[ 1693.295803]  getname_flags+0x95/0xe0
[ 1693.295821]  user_path_at+0x27/0x90
[ 1693.295840]  __x64_sys_mount+0x1e9/0x300
[ 1693.295861]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1693.295880]  ? lock_release+0xc8/0x290
[ 1693.295899]  do_syscall_64+0xbf/0x360
[ 1693.295917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1693.295930] RIP: 0033:0x7fb9c1c2fb19
[ 1693.295939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1693.295961] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1693.295973] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1693.295981] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1693.295989] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1693.295996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1693.296003] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1693.296021]  </TASK>
18:12:11 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xa000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:11 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x700, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:11 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x180)

[ 1693.432559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1693.453305] No source specified
[ 1693.468833] No source specified
[ 1695.834530] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1695.840448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1695.842639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1695.848385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1695.854284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1697.869229] Bluetooth: hci6: command tx timeout
[ 1699.917116] Bluetooth: hci6: command tx timeout
[ 1701.964851] Bluetooth: hci6: command tx timeout
[ 1704.013067] Bluetooth: hci6: command tx timeout
[ 1713.989242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1713.990770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1714.043621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1714.044736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1714.395687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1714.403157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1714.737121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:12:41 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 8)

18:12:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30001040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x3bd7b026c5cd57f6, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x84}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0xfffff560)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x2f)

18:12:41 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:12:41 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x810, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:41 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xb000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x180)

18:12:41 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x800)

18:12:41 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1723.620294] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1723.638288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:12:41 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 9)

[ 1723.663747] No source specified
[ 1723.664994] No source specified
[ 1723.677848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1723.695130] FAULT_INJECTION: forcing a failure.
[ 1723.695130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1723.696165] CPU: 0 UID: 0 PID: 26536 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1723.696182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1723.696190] Call Trace:
[ 1723.696194]  <TASK>
[ 1723.696199]  dump_stack_lvl+0xfa/0x120
[ 1723.696223]  should_fail_ex+0x4d7/0x5e0
[ 1723.696240]  strncpy_from_user+0x3b/0x2f0
[ 1723.696312]  getname_flags.part.0+0x8d/0x540
[ 1723.696332]  getname_flags+0x95/0xe0
[ 1723.696350]  user_path_at+0x27/0x90
[ 1723.696368]  __x64_sys_mount+0x1e9/0x300
[ 1723.696390]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1723.696412]  ? lock_release+0xc8/0x290
[ 1723.696433]  do_syscall_64+0xbf/0x360
[ 1723.696450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1723.696464] RIP: 0033:0x7fb9c1c2fb19
[ 1723.696473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1723.696485] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1723.696497] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1723.696505] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1723.696513] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1723.696521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1723.696528] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1723.696546]  </TASK>
18:12:41 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x10000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:41 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 10)

18:12:42 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1723.760023] FAULT_INJECTION: forcing a failure.
[ 1723.760023] name failslab, interval 1, probability 0, space 0, times 0
[ 1723.760973] CPU: 0 UID: 0 PID: 26555 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1723.760990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1723.760998] Call Trace:
[ 1723.761003]  <TASK>
[ 1723.761008]  dump_stack_lvl+0xfa/0x120
[ 1723.761030]  should_fail_ex+0x4d7/0x5e0
[ 1723.761048]  should_failslab+0xc2/0x120
[ 1723.761062]  __kmalloc_cache_noprof+0x73/0x470
[ 1723.761081]  ? find_held_lock+0x2b/0x80
[ 1723.761103]  ? __get_fs_type+0xe6/0x160
[ 1723.761114]  ? alloc_fs_context+0x58/0x9e0
[ 1723.761136]  ? alloc_fs_context+0x58/0x9e0
[ 1723.761151]  ? _raw_read_unlock+0x1e/0x40
[ 1723.761164]  alloc_fs_context+0x58/0x9e0
[ 1723.761185]  path_mount+0xab9/0x1d70
[ 1723.761207]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1723.761230]  ? __pfx_path_mount+0x10/0x10
[ 1723.761248]  ? kmem_cache_free+0x2a1/0x460
[ 1723.761266]  ? putname.part.0+0x11b/0x160
[ 1723.761280]  ? getname_flags.part.0+0x1c6/0x540
[ 1723.761297]  ? putname.part.0+0x11b/0x160
[ 1723.761312]  __x64_sys_mount+0x27b/0x300
[ 1723.761332]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1723.761357]  do_syscall_64+0xbf/0x360
[ 1723.761374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1723.761388] RIP: 0033:0x7fb9c1c2fb19
[ 1723.761397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1723.761409] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1723.761421] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1723.761430] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1723.761437] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1723.761445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1723.761453] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1723.761470]  </TASK>
18:12:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 11)

18:12:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x900, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1723.840856] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1723.854039] No source specified
[ 1723.861415] No source specified
[ 1724.030313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:12:52 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 12)

18:12:52 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:12:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{0x0, 0x2, 0x3ff, 0x6, 0x0, 0x1000, 0x1, 0xfff, 0x1, 0x40, 0x0, 0x7, 0x7ff, 0x2000000000, 0xc7}})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:12:52 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:12:52 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa00, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:52 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x20000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:52 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000) (fail_nth: 1)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:12:52 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000) (fail_nth: 1)

[ 1734.725989] No source specified
[ 1734.728907] No source specified
[ 1734.755371] FAULT_INJECTION: forcing a failure.
[ 1734.755371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1734.756418] CPU: 0 UID: 0 PID: 26671 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1734.756434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1734.756442] Call Trace:
[ 1734.756446]  <TASK>
[ 1734.756451]  dump_stack_lvl+0xfa/0x120
[ 1734.756472]  should_fail_ex+0x4d7/0x5e0
[ 1734.756487]  _copy_to_user+0x32/0xd0
[ 1734.756505]  store_msg+0x5a/0x160
[ 1734.756526]  do_msg_fill+0xa4/0xf0
[ 1734.756546]  do_msgrcv+0xa1c/0x1280
[ 1734.756559]  ? __pfx_do_msg_fill+0x10/0x10
[ 1734.756580]  ? __pfx_do_msgrcv+0x10/0x10
[ 1734.756591]  ? __might_fault+0xe0/0x190
[ 1734.756605]  ? find_held_lock+0x2b/0x80
[ 1734.756623]  ? syscall_trace_enter+0x1cf/0x240
[ 1734.756635]  ? lock_release+0xc8/0x290
[ 1734.756652]  do_syscall_64+0xbf/0x360
[ 1734.756669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1734.756682] RIP: 0033:0x7f1db030bb19
[ 1734.756692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1734.756703] RSP: 002b:00007f1dad881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[ 1734.756715] RAX: ffffffffffffffda RBX: 00007f1db041ef60 RCX: 00007f1db030bb19
[ 1734.756723] RDX: 00000000000000a1 RSI: 0000000020000080 RDI: 0000000000000034
[ 1734.756730] RBP: 00007f1dad8811d0 R08: 0000000000003000 R09: 0000000000000000
[ 1734.756737] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1734.756744] R13: 00007fffaf4f6ccf R14: 00007f1dad881300 R15: 0000000000022000
[ 1734.756761]  </TASK>
[ 1734.769619] FAULT_INJECTION: forcing a failure.
[ 1734.769619] name failslab, interval 1, probability 0, space 0, times 0
[ 1734.771370] CPU: 1 UID: 0 PID: 26672 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1734.771400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1734.771413] Call Trace:
[ 1734.771420]  <TASK>
[ 1734.771429]  dump_stack_lvl+0xfa/0x120
[ 1734.771459]  should_fail_ex+0x4d7/0x5e0
[ 1734.771486]  should_failslab+0xc2/0x120
[ 1734.771509]  __kmalloc_cache_noprof+0x73/0x470
[ 1734.771541]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1734.771572]  ? legacy_init_fs_context+0x44/0xe0
[ 1734.771612]  ? legacy_init_fs_context+0x44/0xe0
[ 1734.771643]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1734.771666]  legacy_init_fs_context+0x44/0xe0
[ 1734.771698]  ? __pfx_legacy_init_fs_context+0x10/0x10
[ 1734.771731]  alloc_fs_context+0x570/0x9e0
[ 1734.771771]  path_mount+0xab9/0x1d70
[ 1734.771811]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1734.771851]  ? __pfx_path_mount+0x10/0x10
[ 1734.771889]  ? kmem_cache_free+0x2a1/0x460
[ 1734.771923]  ? putname.part.0+0x11b/0x160
[ 1734.771949]  ? getname_flags.part.0+0x1c6/0x540
[ 1734.771988]  ? putname.part.0+0x11b/0x160
[ 1734.772018]  __x64_sys_mount+0x27b/0x300
[ 1734.772058]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1734.772108]  do_syscall_64+0xbf/0x360
[ 1734.772139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1734.772162] RIP: 0033:0x7fb9c1c2fb19
[ 1734.772179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1734.772201] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1734.772223] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1734.772238] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1734.772252] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1734.772267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1734.772280] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1734.772314]  </TASK>
[ 1734.778430] FAULT_INJECTION: forcing a failure.
[ 1734.778430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1734.791405] CPU: 0 UID: 0 PID: 26670 Comm: syz-executor.4 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1734.791421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1734.791428] Call Trace:
[ 1734.791432]  <TASK>
[ 1734.791436]  dump_stack_lvl+0xfa/0x120
[ 1734.791452]  should_fail_ex+0x4d7/0x5e0
[ 1734.791467]  _copy_to_user+0x32/0xd0
[ 1734.791484]  store_msg+0x5a/0x160
[ 1734.791505]  do_msg_fill+0xa4/0xf0
[ 1734.791525]  do_msgrcv+0xa1c/0x1280
[ 1734.791539]  ? __pfx_do_msg_fill+0x10/0x10
[ 1734.791561]  ? __pfx_do_msgrcv+0x10/0x10
[ 1734.791572]  ? __might_fault+0xe0/0x190
[ 1734.791589]  ? lock_release+0xc8/0x290
[ 1734.791607]  do_syscall_64+0xbf/0x360
[ 1734.791624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1734.791635] RIP: 0033:0x7fdf3a097b19
[ 1734.791644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1734.791656] RSP: 002b:00007fdf3760d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[ 1734.791667] RAX: ffffffffffffffda RBX: 00007fdf3a1aaf60 RCX: 00007fdf3a097b19
[ 1734.791675] RDX: 0000000000000086 RSI: 0000000020000040 RDI: 00000000000200fe
[ 1734.791682] RBP: 00007fdf3760d1d0 R08: 0000000000002000 R09: 0000000000000000
[ 1734.791689] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1734.791696] R13: 00007fff218c322f R14: 00007fdf3760d300 R15: 0000000000022000
[ 1734.791715]  </TASK>
[ 1734.799137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:12:52 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x20100000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:53 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000) (fail_nth: 2)

[ 1734.871364] No source specified
[ 1734.877825] No source specified
18:12:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 13)

18:12:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb00, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:12:53 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000) (fail_nth: 2)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1734.924800] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:12:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 14)

[ 1734.961038] FAULT_INJECTION: forcing a failure.
[ 1734.961038] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1734.962097] CPU: 0 UID: 0 PID: 26786 Comm: syz-executor.1 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1734.962113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1734.962121] Call Trace:
[ 1734.962125]  <TASK>
[ 1734.962130]  dump_stack_lvl+0xfa/0x120
[ 1734.962151]  should_fail_ex+0x4d7/0x5e0
[ 1734.962167]  _copy_to_user+0x32/0xd0
[ 1734.962184]  simple_read_from_buffer+0xe0/0x180
[ 1734.962203]  proc_fail_nth_read+0x189/0x270
[ 1734.962222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1734.962241]  ? security_file_permission+0x22/0x90
[ 1734.962256]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1734.962274]  vfs_read+0x1eb/0xbe0
[ 1734.962296]  ? __pfx_vfs_read+0x10/0x10
[ 1734.962314]  ? lock_release+0xc8/0x290
[ 1734.962331]  ? __fget_files+0x20d/0x3b0
[ 1734.962354]  ksys_read+0x121/0x240
[ 1734.962372]  ? __pfx_ksys_read+0x10/0x10
[ 1734.962395]  do_syscall_64+0xbf/0x360
[ 1734.962412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1734.962425] RIP: 0033:0x7f1db02be69c
[ 1734.962434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1734.962446] RSP: 002b:00007f1dad881170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1734.962457] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f1db02be69c
[ 1734.962465] RDX: 000000000000000f RSI: 00007f1dad8811e0 RDI: 0000000000000003
[ 1734.962472] RBP: 00007f1dad8811d0 R08: 0000000000000000 R09: 0000000000000000
[ 1734.962479] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1734.962486] R13: 00007fffaf4f6ccf R14: 00007f1dad881300 R15: 0000000000022000
[ 1734.962504]  </TASK>
18:12:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x8cffffff}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:12:53 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1735.017271] FAULT_INJECTION: forcing a failure.
[ 1735.017271] name failslab, interval 1, probability 0, space 0, times 0
[ 1735.018218] CPU: 0 UID: 0 PID: 26788 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1735.018234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1735.018241] Call Trace:
[ 1735.018246]  <TASK>
[ 1735.018251]  dump_stack_lvl+0xfa/0x120
[ 1735.018271]  should_fail_ex+0x4d7/0x5e0
[ 1735.018287]  should_failslab+0xc2/0x120
[ 1735.018299]  __kmalloc_cache_noprof+0x73/0x470
[ 1735.018316]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1735.018336]  ? v9fs_mount+0x9d/0x9e0
[ 1735.018351]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[ 1735.018372]  ? v9fs_mount+0x9d/0x9e0
[ 1735.018386]  v9fs_mount+0x9d/0x9e0
[ 1735.018402]  ? __pfx_v9fs_mount+0x10/0x10
[ 1735.018418]  ? cap_capable+0xdb/0x3b0
[ 1735.018439]  ? __pfx_v9fs_mount+0x10/0x10
[ 1735.018453]  legacy_get_tree+0x109/0x220
[ 1735.018472]  vfs_get_tree+0x93/0x340
[ 1735.018488]  path_mount+0x122f/0x1d70
[ 1735.018508]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1735.018530]  ? __pfx_path_mount+0x10/0x10
[ 1735.018549]  ? kmem_cache_free+0x2a1/0x460
[ 1735.018566]  ? putname.part.0+0x11b/0x160
[ 1735.018580]  ? getname_flags.part.0+0x1c6/0x540
[ 1735.018596]  ? putname.part.0+0x11b/0x160
[ 1735.018611]  __x64_sys_mount+0x27b/0x300
[ 1735.018631]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1735.018656]  do_syscall_64+0xbf/0x360
[ 1735.018673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1735.018686] RIP: 0033:0x7fb9c1c2fb19
[ 1735.018695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1735.018707] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1735.018719] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1735.018726] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1735.018734] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1735.018741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1735.018748] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1735.018765]  </TASK>
[ 1735.053876] No source specified
[ 1735.054673] No source specified
18:12:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 15)

[ 1735.074950] FAULT_INJECTION: forcing a failure.
[ 1735.074950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1735.076815] CPU: 1 UID: 0 PID: 26792 Comm: syz-executor.4 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1735.076847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1735.076861] Call Trace:
[ 1735.076869]  <TASK>
[ 1735.076879]  dump_stack_lvl+0xfa/0x120
[ 1735.076913]  should_fail_ex+0x4d7/0x5e0
[ 1735.076943]  _copy_to_user+0x32/0xd0
[ 1735.076984]  simple_read_from_buffer+0xe0/0x180
[ 1735.077020]  proc_fail_nth_read+0x189/0x270
[ 1735.077058]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1735.077095]  ? security_file_permission+0x22/0x90
[ 1735.077124]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1735.077160]  vfs_read+0x1eb/0xbe0
[ 1735.077202]  ? __pfx_vfs_read+0x10/0x10
[ 1735.077239]  ? lock_release+0xc8/0x290
[ 1735.077270]  ? __fget_files+0x20d/0x3b0
[ 1735.077317]  ksys_read+0x121/0x240
[ 1735.077352]  ? __pfx_ksys_read+0x10/0x10
[ 1735.077398]  do_syscall_64+0xbf/0x360
[ 1735.077431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1735.077456] RIP: 0033:0x7fdf3a04a69c
[ 1735.077474] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1735.077496] RSP: 002b:00007fdf3760d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1735.077519] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fdf3a04a69c
[ 1735.077534] RDX: 000000000000000f RSI: 00007fdf3760d1e0 RDI: 0000000000000003
[ 1735.077548] RBP: 00007fdf3760d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1735.077562] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1735.077576] R13: 00007fff218c322f R14: 00007fdf3760d300 R15: 0000000000022000
[ 1735.077611]  </TASK>
[ 1735.134669] FAULT_INJECTION: forcing a failure.
[ 1735.134669] name failslab, interval 1, probability 0, space 0, times 0
[ 1735.135672] CPU: 0 UID: 0 PID: 26800 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1735.135688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1735.135696] Call Trace:
[ 1735.135700]  <TASK>
[ 1735.135704]  dump_stack_lvl+0xfa/0x120
[ 1735.135725]  should_fail_ex+0x4d7/0x5e0
[ 1735.135742]  should_failslab+0xc2/0x120
[ 1735.135754]  __kmalloc_cache_noprof+0x73/0x470
[ 1735.135771]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1735.135790]  ? v9fs_mount+0x9d/0x9e0
[ 1735.135806]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[ 1735.135826]  ? v9fs_mount+0x9d/0x9e0
[ 1735.135841]  v9fs_mount+0x9d/0x9e0
[ 1735.135855]  ? __pfx_v9fs_mount+0x10/0x10
[ 1735.135871]  ? cap_capable+0xdb/0x3b0
[ 1735.135891]  ? __pfx_v9fs_mount+0x10/0x10
[ 1735.135906]  legacy_get_tree+0x109/0x220
[ 1735.135924]  vfs_get_tree+0x93/0x340
[ 1735.135940]  path_mount+0x122f/0x1d70
[ 1735.135964]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1735.135985]  ? __pfx_path_mount+0x10/0x10
[ 1735.136004]  ? kmem_cache_free+0x2a1/0x460
[ 1735.136021]  ? putname.part.0+0x11b/0x160
[ 1735.136035]  ? getname_flags.part.0+0x1c6/0x540
[ 1735.136051]  ? putname.part.0+0x11b/0x160
[ 1735.136066]  __x64_sys_mount+0x27b/0x300
[ 1735.136085]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1735.136110]  do_syscall_64+0xbf/0x360
[ 1735.136127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1735.136140] RIP: 0033:0x7fb9c1c2fb19
[ 1735.136149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1735.136160] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1735.136172] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1735.136180] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1735.136187] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1735.136194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1735.136201] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1735.136218]  </TASK>
[ 1735.166195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:02 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:13:02 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:13:02 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:13:02 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xc0ed0000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:02 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:13:02 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1008, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:02 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 16)

18:13:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read$ptp(0xffffffffffffffff, 0x0, 0x0)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000021c0)={0x2, 0x0, @multicast1}, &(0x7f0000002200)=0x10, 0x800)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
r4 = syz_mount_image$msdos(&(0x7f0000002740), &(0x7f0000002780)='./file0\x00', 0x5, 0x4, &(0x7f0000002a80)=[{&(0x7f00000027c0)="6025dc7e4ffa2c108e8a96e478bbbe6153a805560e428d174ada018259edc9424c86d96e01a2c55f4f1384d8f557364b88ff74e543bb5f92fefc42a81392a8bbf9194be41830fa03142df1b0c8", 0x4d, 0x4}, {&(0x7f0000002840)="8018258786c762f93de7c200bf47edcbc174b7372e67f48ae040b8390ce2f118df29ffb326a3b236d7a889f82926e5a7c8dd7b7fae1e2a1d9556336bdeeff44b3026df62acdc736edd4e45ee0f4ce09412023b5632e78c49c8af9d52542afcc2ea1312c763c26b2a6f8b83403596dbb27bea596f91415edcf64838640600e0e82eb0a01ff8492488eb246e877b98b7a2a0d3fcaf3bea581061d4ef7a6fb8adff3ffddba1d4", 0xa5, 0x7fffffff}, {&(0x7f0000002900)="9b728c34681db1854f5ffde54aed0ae3c14fe9c9140053b78a69361c0ac787f4610af8b89a9cd34083c789c9a089b2ae98780c2f02b24d06031049dcc1d024c612778f9294a261545e88a72d6e4c5dc69b290952a01aaa2971a1e5b7931df8e317ae5554dfc6be09fe81c97e8112f6e9fd34dd80fe585f327434ec9d45172b05b089c95572197b0a36c05a867c510f377d71828d9ff9df57367ca933c84d37f6e27b9eb290624718e8f3f25b3b1f62e4f2eb0912b39485fd3eda0634d0e0d50ea34fc57f00d939af0ccf23ce56acef5ee235059e85e4be004a6b5d83ebf0116cb226640ff4b6bf42e7dea37523888920", 0xf0, 0x6}, {&(0x7f0000002a00)="120ea3a9a95d0605e3a72a779021364ced3113762272be74bcd674466058a13b0968b079a3000c9fa3bf240659adc61a078decc12c6352e44d272a20576a3b16179b7b1507fc786eb9c23b32fc6fea2fd4835a06515c0e5ef509f99ac0740177608746bade7ace723945eb2436622fa4410dea5da318e6c5fd3a26", 0x7b, 0x2}], 0x1150000, &(0x7f0000002b00)={[{@fat=@showexec}, {@fat=@quiet}, {@fat=@sys_immutable}, {@dots}], [{@obj_user={'obj_user', 0x3d, ','}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]})
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r5, 0x0, 0x0)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002b80)='cgroup.threads\x00', 0x2, 0x0)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r7, 0x0, 0x0)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000240)="235765a9255419f2c3698b8d48e9c4f06d8566439c5949a37dfbbf01744258364dd0740c2874d4b0cdf818181990255fe30bb2957de3172b8244c2330d9cec9aa1222c2268483fb8de7e05974d1f1f61ce", 0x51}, {&(0x7f00000003c0)="a9fe6a31a66532b5971d3e4dca4ff9c83e46292914d82097b6fed2bd458a7181027b186482457733e5e6f639aac596dfe9debdfa9c665c851c9c852d942d453ac39ee7a22378cb3dd5b692262fe1c2952ee6fe41648d587753cfb0f600434d52490aff9a689fe61995038d165f3fa7e79a1c7f7b47be56", 0x77}, {&(0x7f0000000440)="9921be14313d93132573fafe215a849fdbc150c724bbe11223055085911fd1a7e50281d11c4c50f98292d488e75e09e65b0df0d5f17d8ac986d3121541695805f050ae45c9424e563b4061cb3fac1d237a8cafde30956fc6de2216e487df0afb65938b1946d222acb0c102e81c7a9737e9a8f07d99a9c9eb0d898673cf73c379ea8a2ccf31390c4bf700d80c14ad5009b424bb62b610f82b11632ef6c342463a7bc79857d2b5c6e89a297209a45f901d6024f6ee59e68141a8e21e318906342dc17160a2f00f9ae377d6", 0xca}, {&(0x7f0000000540)="87f5b96cd7ff42e9781c6d21f8b33512794db20d5f6e0475ba810cae1742c016a4d54078126ef992cade0c9283f260b9257c4c633fa7df32d7dfcbb8f490e3f466a162311ab4e7badd77174437ec0ac22fce589ac4e2d2ca4af5c3c10d41134a56d0438049e87ffa82544adf1b255d1a7f2c8797383b57f3628bf43a40174a67d9ea0850df", 0x85}, {&(0x7f00000002c0)="40e8915831c716c68ee48bf1b3a918ee95ec990badd53376b9bfaa61ce98092b918d9175515ab17a18f96c2aaf32d3d7cf2fdf126492559a6a8e23cb0de29179", 0x40}, {&(0x7f0000000600)}], 0x6, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}], 0x140, 0x44080}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b80)="1d8ef9829bf4317593c4928f0ba759fca54e124419411547626862a0f3c06b2c34d8bb32546886ad6462972b8fdbd5dae8f4e5b68f919dba8772c5493dc234d3ba51cc35b67f5847f121d4db89b7021fe62772a134989d847110f6cc69d079e0a246b73108dc1992d350a5c903530b0021027f12637d14fff78b0d17ce70e136a3af14a3fa49031e528a56fc1552b7a2b8d29ca270aff190c65116a58663523d3dd57a1dd782a2f7066d3a0e219650c661f45232fb4f90a23872d7d5ae5f", 0xbe}, {&(0x7f0000000c40)="be92", 0x2}, {&(0x7f0000000c80)="c971e47c35a71e47e5f1c3bd45fffb219b03daf1250297b7d6e3c49c386b446f57f3ff7c55955bd466e274cdf3cf8f969754", 0x32}, {&(0x7f0000000cc0)="9691d9f905a04fbaec698953265d96ec22c0d6d3905abe24851e07ec321830cbaee1e4d4823e79d97927dab8055b227161fd92adae8e2fe139192014f12064cd5a973e03929e5755ff78d6ab8ded20d250a4041a2f42d56e225330ead601fa74a37880e4e6cc051cd5560030a367c63c768b4059b6c6fe661cf0afb4e21829c91391ca6d6b39f15fdd04bd8b4e48871714a8f8b377789fc68341f3b60a20b852a499c48c554d45964a3036d260270512eb", 0xb1}], 0x4, &(0x7f0000002240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0]}}], 0x88, 0x1}}, {{&(0x7f0000002300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002380)="61944b45d5260afd27fdd1ac397c6a472df462787edf70cc89a4806124fae3727fa9acf34d101a175c17fb304fdf0967f6a237ca7f0d39f4be258ae6b153314dcee3d7a1c883ab2a13a4f5d996524d4481ea07b19d34d6f601fa23d459bdd20c142a68aabdce7afd089f451772015671abadde89ee64edb0ce757cb2ae4843b3c96a1b7c32cea07d1c4a9e678e4b79bfb7923573b72ebefae01095d6f7af2bfb3affab8d7ab7aa6b2235d6d451b6a037a8c3edd23d3d06a1dfd08897ba0226f5d4a38c11ed963899e7b03fccab514f548e4a1e14f91b5bb55cfdaf65", 0xdc}, {&(0x7f0000002480)="9a27686174c657350260f3f53946063a5320b1cbeaf92dc1e8e267f41e54ce9257d89f359938385604b9bb28268b4b4f51cc8db2c601da590e7e05110c1abadcbb389c7456ae964f73cad6fc1af1610dab5f725bcbceb8a36bc5a4a7db52bc88551a73ff7aec945586446e2e4bc85a3ac8", 0x71}, {&(0x7f0000002500)="5f22e49424a86763120adc18c5991650f2b42f014f8c2bdc1fb860", 0x1b}, {&(0x7f00000006c0)="72a8802b81729db7fd7b792b64298a655365750ba3ca835141e80fe04ed6dd07038f56c4feb22b64d2f8bbda8a363b8f0f616945f3e1122ad88bbddabd26e9aeb8d44eb228034599a6e81f1424a96d908cc765f95794aab3550e8421bddf97a7c023bd78b5ec208c0853a08a2582b8c8df7c0846c73eef2e3fdabc49e654a4f83b46c9f4845425aac5ba32f426a91f27e172efb70000000000000000008e78f444664d474eecdd75cb64d56ad60ff37a367eef80f48cb863a39371935db0eab8c14bc455f6df7e2d18bccf9115dbcd7ea0106d25a07936e044dee14963a4ab11cb9bb2658646b9800f28", 0xea}, {&(0x7f0000002600)="ca767ddda900097572f2e33b658816ea1d9757f67c872f98a0f2a3613e293af088165a3518fc76697cbb917ef759197dd2f6b1aea6704444ee1ba8b2851c39e279333b077be7369c5d6c6bf1862de2bc2179149d8e742445b9fb8ecfd124fb8af30c8d01199bd2e0db5065f5914599cfb5b22dca5935cc1f2c9c1ee582459889a9dc289962119ba5c0", 0x89}], 0x5, &(0x7f0000002bc0)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r0, r3, r4, r5, r6, r7]}}, @rights={{0x18, 0x1, 0x1, [r0, r8]}}], 0x48}}], 0x3, 0x20004845)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0xb4, 0x7, 0x8, 0x0, 0x8, 0x8000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x8}, 0x11084, 0x6, 0xd0b, 0x3, 0x2, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x5, r0, 0x2)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xff, 0x2, 0x9, 0x1, 0x0, 0x4, 0x4000, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x102a0, 0x909, 0xffffff00, 0x5, 0x7, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r0, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000180)=0xe4, 0x4)

[ 1743.841641] FAULT_INJECTION: forcing a failure.
[ 1743.841641] name failslab, interval 1, probability 0, space 0, times 0
[ 1743.842679] CPU: 0 UID: 0 PID: 26816 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1743.842695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1743.842703] Call Trace:
[ 1743.842707]  <TASK>
[ 1743.842712]  dump_stack_lvl+0xfa/0x120
[ 1743.842733]  should_fail_ex+0x4d7/0x5e0
[ 1743.842749]  should_failslab+0xc2/0x120
[ 1743.842762]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1743.842779]  ? v9fs_mount+0x9d/0x9e0
[ 1743.842794]  ? legacy_get_tree+0x109/0x220
[ 1743.842809]  ? vfs_get_tree+0x93/0x340
[ 1743.842823]  ? path_mount+0x122f/0x1d70
[ 1743.842841]  ? __x64_sys_mount+0x27b/0x300
[ 1743.842859]  ? v9fs_session_init+0xaa/0x17a0
[ 1743.842870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1743.842887]  kstrdup+0x3e/0xc0
[ 1743.842906]  v9fs_session_init+0xaa/0x17a0
[ 1743.842917]  ? do_raw_spin_lock+0x123/0x260
[ 1743.842935]  ? find_held_lock+0x2b/0x80
[ 1743.842957]  ? __create_object+0x59/0x80
[ 1743.842972]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1743.842985]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1743.842999]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1743.843011]  ? __create_object+0x59/0x80
[ 1743.843026]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1743.843042]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1743.843066]  v9fs_mount+0xbc/0x9e0
[ 1743.843081]  ? __pfx_v9fs_mount+0x10/0x10
[ 1743.843097]  ? cap_capable+0xdb/0x3b0
[ 1743.843117]  ? __pfx_v9fs_mount+0x10/0x10
[ 1743.843132]  legacy_get_tree+0x109/0x220
[ 1743.843149]  vfs_get_tree+0x93/0x340
[ 1743.843164]  path_mount+0x122f/0x1d70
[ 1743.843183]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1743.843204]  ? __pfx_path_mount+0x10/0x10
[ 1743.843223]  ? kmem_cache_free+0x2a1/0x460
[ 1743.843240]  ? putname.part.0+0x11b/0x160
[ 1743.843253]  ? getname_flags.part.0+0x1c6/0x540
[ 1743.843269]  ? putname.part.0+0x11b/0x160
[ 1743.843284]  __x64_sys_mount+0x27b/0x300
[ 1743.843304]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1743.843329]  do_syscall_64+0xbf/0x360
[ 1743.843346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1743.843358] RIP: 0033:0x7fb9c1c2fb19
[ 1743.843367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1743.843379] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1743.843390] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1743.843398] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1743.843405] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1743.843412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1743.843419] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1743.843436]  </TASK>
18:13:02 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 17)

[ 1743.901005] No source specified
[ 1743.912234] No source specified
[ 1743.923799] loop5: detected capacity change from 0 to 264192
[ 1743.947149] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1743.980295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:02 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 18)

18:13:02 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0x8, 0x3, 0x3000)

18:13:02 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1020, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:02 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xf6ffffff}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:02 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2002)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1744.097559] FAULT_INJECTION: forcing a failure.
[ 1744.097559] name failslab, interval 1, probability 0, space 0, times 0
[ 1744.099466] CPU: 1 UID: 0 PID: 26937 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1744.099498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1744.099512] Call Trace:
[ 1744.099520]  <TASK>
[ 1744.099529]  dump_stack_lvl+0xfa/0x120
[ 1744.099564]  should_fail_ex+0x4d7/0x5e0
[ 1744.099593]  should_failslab+0xc2/0x120
[ 1744.099617]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1744.099651]  ? v9fs_mount+0x9d/0x9e0
[ 1744.099679]  ? legacy_get_tree+0x109/0x220
[ 1744.099708]  ? vfs_get_tree+0x93/0x340
[ 1744.099737]  ? __x64_sys_mount+0x200/0x300
[ 1744.099773]  ? v9fs_session_init+0xeb/0x17a0
[ 1744.099803]  kstrdup+0x3e/0xc0
[ 1744.099839]  v9fs_session_init+0xeb/0x17a0
[ 1744.099863]  ? do_raw_spin_lock+0x123/0x260
[ 1744.099896]  ? find_held_lock+0x2b/0x80
[ 1744.099930]  ? __create_object+0x59/0x80
[ 1744.099967]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1744.099991]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1744.100015]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1744.100042]  ? __create_object+0x59/0x80
[ 1744.100072]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1744.100104]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1744.100152]  v9fs_mount+0xbc/0x9e0
[ 1744.100182]  ? __pfx_v9fs_mount+0x10/0x10
[ 1744.100214]  ? cap_capable+0xdb/0x3b0
[ 1744.100252]  ? __pfx_v9fs_mount+0x10/0x10
[ 1744.100282]  legacy_get_tree+0x109/0x220
[ 1744.100316]  vfs_get_tree+0x93/0x340
[ 1744.100346]  path_mount+0x122f/0x1d70
[ 1744.100384]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1744.100424]  ? __pfx_path_mount+0x10/0x10
[ 1744.100462]  ? kmem_cache_free+0x2a1/0x460
[ 1744.100508]  ? putname.part.0+0x11b/0x160
[ 1744.100534]  ? getname_flags.part.0+0x1c6/0x540
[ 1744.100565]  ? putname.part.0+0x11b/0x160
[ 1744.100596]  __x64_sys_mount+0x27b/0x300
[ 1744.100635]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1744.100685]  do_syscall_64+0xbf/0x360
[ 1744.100717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1744.100742] RIP: 0033:0x7fb9c1c2fb19
[ 1744.100760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1744.100781] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1744.100804] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1744.100819] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1744.100834] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1744.100848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1744.100861] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1744.100895]  </TASK>
[ 1744.158002] No source specified
18:13:02 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x2, 0x3000)

[ 1744.171688] No source specified
18:13:02 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x4, 0x3000)

[ 1744.341513] loop5: detected capacity change from 0 to 264192
[ 1744.359263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:14 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:14 executing program 4:
r0 = msgget$private(0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
r2 = gettid()
r3 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r3, &(0x7f0000000080)={0x2, 0x0, 0x0, @local}, 0x1c)
tgkill(0x0, r2, 0x80000000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x1100)
setresuid(0x0, r6, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3, r1, r5, r6, 0xee01, 0x2d, 0x3f}, 0x0, 0x0, 0x8, 0x5, 0x0, 0x1000, 0xfffffffffffffcba, 0x20, 0x79de, 0x9, 0x0, 0xffffffffffffffff})
r7 = msgget$private(0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd607437b800140400fe800000000000000000000000000001008000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
msgrcv(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/136], 0x88, 0x1, 0x2000)
msgrcv(r0, &(0x7f0000000000), 0x8, 0x2, 0x3800)
msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d007eca2ee231915c028d570000000000002f9738c9f28f9ecf5c0400000000000000492f48a541565f39a2"], 0x8, 0x0)

18:13:14 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x80000, 0x3000)

18:13:14 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 19)

18:13:14 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xf9fdffff}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:14 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:13:14 executing program 5:
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040))
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:13:14 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1756.251392] No source specified
[ 1756.257146] No source specified
[ 1756.264914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:14 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3002)

18:13:14 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xffffe000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1756.316115] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:13:14 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2010, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1756.373512] No source specified
18:13:14 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x84)
msgsnd(r1, &(0x7f0000000000)={0x3, "a9317ab2eeb1350ce4fff6717b1246a1a118752ac3c7fc1995db8728c0378e943421bb5bd69e1b9a6430ae849dce012468d8efb4b66c09"}, 0x3f, 0x800)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:13:14 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 20)

[ 1756.386671] No source specified
18:13:14 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xfffffdf9}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1756.436385] FAULT_INJECTION: forcing a failure.
[ 1756.436385] name failslab, interval 1, probability 0, space 0, times 0
[ 1756.437439] CPU: 0 UID: 0 PID: 27038 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1756.437457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1756.437465] Call Trace:
[ 1756.437471]  <TASK>
[ 1756.437477]  dump_stack_lvl+0xfa/0x120
[ 1756.437500]  should_fail_ex+0x4d7/0x5e0
[ 1756.437517]  should_failslab+0xc2/0x120
[ 1756.437531]  __kmalloc_cache_noprof+0x73/0x470
[ 1756.437551]  ? p9_client_create+0xc0/0x11b0
[ 1756.437571]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1756.437590]  ? p9_client_create+0xc0/0x11b0
[ 1756.437609]  p9_client_create+0xc0/0x11b0
[ 1756.437631]  ? __create_object+0x59/0x80
[ 1756.437648]  ? __pfx_p9_client_create+0x10/0x10
[ 1756.437667]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1756.437692]  ? kasan_save_track+0x14/0x30
[ 1756.437705]  ? __kasan_kmalloc+0x7f/0x90
[ 1756.437718]  ? trace_kmalloc+0x1f/0xb0
[ 1756.437730]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[ 1756.437749]  ? v9fs_mount+0x9d/0x9e0
[ 1756.437766]  ? legacy_get_tree+0x109/0x220
[ 1756.437783]  ? vfs_get_tree+0x93/0x340
[ 1756.437799]  ? lockdep_init_map_type+0x4b/0x240
[ 1756.437816]  ? __raw_spin_lock_init+0x3a/0x110
[ 1756.437836]  v9fs_session_init+0x1df/0x17a0
[ 1756.437849]  ? do_raw_spin_lock+0x123/0x260
[ 1756.437868]  ? find_held_lock+0x2b/0x80
[ 1756.437886]  ? __create_object+0x59/0x80
[ 1756.437902]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1756.437917]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1756.437930]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1756.437943]  ? __create_object+0x59/0x80
[ 1756.437964]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1756.437982]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1756.438010]  v9fs_mount+0xbc/0x9e0
[ 1756.438027]  ? __pfx_v9fs_mount+0x10/0x10
[ 1756.438044]  ? cap_capable+0xdb/0x3b0
[ 1756.438067]  ? __pfx_v9fs_mount+0x10/0x10
[ 1756.438083]  legacy_get_tree+0x109/0x220
[ 1756.438102]  vfs_get_tree+0x93/0x340
[ 1756.438119]  path_mount+0x122f/0x1d70
[ 1756.438142]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1756.438164]  ? __pfx_path_mount+0x10/0x10
[ 1756.438185]  ? kmem_cache_free+0x2a1/0x460
[ 1756.438204]  ? putname.part.0+0x11b/0x160
[ 1756.438218]  ? getname_flags.part.0+0x1c6/0x540
[ 1756.438236]  ? putname.part.0+0x11b/0x160
[ 1756.438253]  __x64_sys_mount+0x27b/0x300
[ 1756.438275]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1756.438303]  do_syscall_64+0xbf/0x360
[ 1756.438322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1756.438336] RIP: 0033:0x7fb9c1c2fb19
[ 1756.438346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1756.438359] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1756.438372] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1756.438381] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1756.438389] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1756.438397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1756.438405] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1756.438424]  </TASK>
18:13:14 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"/134], 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:13:14 executing program 1:
msgsnd(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00'], 0x8, 0x0)
msgsnd(0x0, &(0x7f0000000140)={0x2, "aa24ddf9a59671a5b03c5a9aa750f5e6e72d216548f3b36504e2a860ed3af0e4406d65ab7f096184a3efb9db4706da935d03eff7c27e5f80aff80afbe87f9ef98965b597a945ed50c95a6107ce00f408d2e3ed8a388e5d2e2718ade7b64e44ef6ef6a4081e95ee8c0d0bc4f8f34d2555872406016879318c9e656d2be83b3258eafa1ffc5eacfcf4bd2aeb4e4833f59c2178dfcc21fba519c12b599cb0a42dc6337e89e2ec7dbb4eec"}, 0xb1, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(0x0, &(0x7f00000015c0)={0x0, "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"}, 0x1008, 0x0)
r0 = msgget(0x0, 0x20)
r1 = msgget(0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, 0x0, 0x2}, 0x90)
msgctl$IPC_RMID(r1, 0x0)
[ 1756.543438] No source specified
msgsnd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/4104], 0x1008, 0x800)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/45}, 0x35, 0x6, 0x0)
r3 = msgget$private(0x0, 0x30)
msgctl$IPC_RMID(r3, 0x0)

[ 1756.550799] No source specified
18:13:14 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1756.589847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:14 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:14 executing program 1:
r0 = msgget$private(0x0, 0x2)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2b, 0x0)
msgrcv(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa1, 0x3, 0x3000)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000140)=""/180)

18:13:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xffffff8c}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:27 executing program 4:
r0 = msgget$private(0x0, 0x409)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01001a0000050000aa7494ce522ba4257336f86b215a365efeca4257f467ef33ffef43d6e3f9ce383faf1e303f0f4aa80d610afec808270923c1b5eceb2397d33eead268f3bf38a5d024d0d14ffa8d14bca0556446dd91549bbb6563a514ab3cdbf430665b053d140e954d869ec56c0b90e4851763d5308dc88e6dae11c1fe28fb38d3b6906d78320167d703c7289d3dea67d10245b007b9e442f993b261223d97950cb061f66fd688aab72d7235e31463fcecc5dbf2e19a09068c7da5b7c3000000000000"], 0x8, 0x0)

18:13:27 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:13:27 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:13:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 21)

18:13:27 executing program 1:
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x100000001)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:13:27 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xedc0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x20}, @device_b, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x3}, {0x5}}}, 0x14)

[ 1769.250680] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1769.253690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1769.260415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1769.269281] No source specified
[ 1769.278064] No source specified
18:13:27 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 22)

18:13:27 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/254}, 0x106, 0x0, 0x800)
msgctl$IPC_RMID(r0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgsnd(r2, &(0x7f0000000280)={0x3, "1f9989f2dfbd7422732e0099ff50b456872e3abb85f16d6b017411a1e3cfb71bacd51b23e57a5324b529abc3268fdd9347fc51ecf3281f6f82d35a23dbb4754f6222aa69ffc5c4246d2de3ca66a5dffce318f44a9a6f91fae65135df1236b0028171c3488a2d60b4986e225fb7835198630d421959c08c0a836ee03085f23cf8ae89929d0d7330344174da52ace9deec90ba522c3df1e3c45ce86d264d911d8decb90623c4a0697ca714a8ef9fa274eb7a8b1b73039dadbe8d7cbc83369a4ab4ae159332d3b2f192fa162c7d23c3e1763a2ac2283f76ad3003ada5ea921d6f01182d4106ded46c3f6291a839c1b1"}, 0xf6, 0x800)

18:13:27 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xfffffff6}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:27 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1769.371286] FAULT_INJECTION: forcing a failure.
[ 1769.371286] name failslab, interval 1, probability 0, space 0, times 0
[ 1769.373515] CPU: 1 UID: 0 PID: 27238 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1769.373557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1769.373571] Call Trace:
[ 1769.373579]  <TASK>
[ 1769.373588]  dump_stack_lvl+0xfa/0x120
[ 1769.373624]  should_fail_ex+0x4d7/0x5e0
[ 1769.373655]  should_failslab+0xc2/0x120
[ 1769.373678]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1769.373716]  ? p9_client_create+0x487/0x11b0
[ 1769.373757]  kstrdup+0x3e/0xc0
[ 1769.373792]  p9_client_create+0x487/0x11b0
[ 1769.373836]  ? __pfx_p9_client_create+0x10/0x10
[ 1769.373870]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1769.373912]  ? kasan_save_track+0x14/0x30
[ 1769.373935]  ? __kasan_kmalloc+0x7f/0x90
[ 1769.373966]  ? trace_kmalloc+0x1f/0xb0
[ 1769.373988]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[ 1769.374022]  ? v9fs_mount+0x9d/0x9e0
[ 1769.374050]  ? legacy_get_tree+0x109/0x220
[ 1769.374079]  ? vfs_get_tree+0x93/0x340
[ 1769.374108]  ? lockdep_init_map_type+0x4b/0x240
[ 1769.374137]  ? __raw_spin_lock_init+0x3a/0x110
[ 1769.374174]  v9fs_session_init+0x1df/0x17a0
[ 1769.374198]  ? do_raw_spin_lock+0x123/0x260
[ 1769.374230]  ? find_held_lock+0x2b/0x80
[ 1769.374263]  ? __create_object+0x59/0x80
[ 1769.374293]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1769.374317]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1769.374341]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1769.374364]  ? __create_object+0x59/0x80
[ 1769.374393]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1769.374439]  v9fs_mount+0xbc/0x9e0
[ 1769.374468]  ? __pfx_v9fs_mount+0x10/0x10
[ 1769.374500]  ? cap_capable+0xdb/0x3b0
[ 1769.374539]  ? __pfx_v9fs_mount+0x10/0x10
[ 1769.374568]  legacy_get_tree+0x109/0x220
[ 1769.374602]  vfs_get_tree+0x93/0x340
[ 1769.374632]  path_mount+0x122f/0x1d70
[ 1769.374671]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1769.374711]  ? __pfx_path_mount+0x10/0x10
[ 1769.374749]  ? kmem_cache_free+0x2a1/0x460
[ 1769.374782]  ? putname.part.0+0x11b/0x160
[ 1769.374808]  ? getname_flags.part.0+0x1c6/0x540
[ 1769.374839]  ? putname.part.0+0x11b/0x160
[ 1769.374870]  __x64_sys_mount+0x27b/0x300
[ 1769.374909]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1769.374959]  do_syscall_64+0xbf/0x360
[ 1769.374992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1769.375016] RIP: 0033:0x7fb9c1c2fb19
[ 1769.375033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1769.375056] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1769.375078] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1769.375094] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1769.375109] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1769.375123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1769.375137] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1769.375171]  </TASK>
[ 1769.388858] No source specified
18:13:27 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/121}, 0x81, 0x2, 0x1000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1769.449772] No source specified
18:13:27 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x2, "f7f90fa24d70ea04cd86123bb61d074dcc89b033b199816efc6f0f9e00123dd95e0600e7ea48446a40f24d1aa680d769f3e5072499fb04a0b8eb371f2c38d1b9e1f139df39"}, 0x4d, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/115)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 1769.571248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:37 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xedc000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:37 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:13:37 executing program 5:
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:13:37 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfffe, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:37 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000), 0x8, 0x2, 0x800)

18:13:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 23)

18:13:37 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:13:37 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000ff0377779a4a8ef333bb0000000000000000000000000000000000000000ea0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6d6c3369105db08db4feeef3fbd6f672fbfe157828c1b5c670989b67d7eaf7540d256bf9372f5064c194c7f2d37fcce16e2"], 0xa1, 0x3, 0x3000)
r1 = msgget(0x3, 0x20)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/197}, 0xcd, 0x0, 0x0)

[ 1779.204718] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1779.205766] msdos: Bad value for 'umask'
[ 1779.209864] msdos: Bad value for 'umask'
[ 1779.242280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:37 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x40000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 24)

18:13:37 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x8000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:37 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000091c4da555900"/149], 0xa1, 0x3, 0x3000)

[ 1779.319706] msdos: Bad value for 'umask'
[ 1779.323228] msdos: Bad value for 'umask'
18:13:37 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget(0x0, 0x270)
msgctl$IPC_RMID(r1, 0x0)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000140)=""/140)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1779.350642] FAULT_INJECTION: forcing a failure.
[ 1779.350642] name failslab, interval 1, probability 0, space 0, times 0
[ 1779.352313] CPU: 1 UID: 0 PID: 27404 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1779.352343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1779.352357] Call Trace:
[ 1779.352364]  <TASK>
[ 1779.352373]  dump_stack_lvl+0xfa/0x120
[ 1779.352407]  should_fail_ex+0x4d7/0x5e0
[ 1779.352435]  should_failslab+0xc2/0x120
[ 1779.352457]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1779.352493]  ? __pfx_match_token+0x10/0x10
[ 1779.352520]  ? p9_client_create+0x588/0x11b0
[ 1779.352559]  kmemdup_nul+0x3b/0xa0
[ 1779.352594]  p9_client_create+0x588/0x11b0
[ 1779.352634]  ? __pfx_p9_client_create+0x10/0x10
[ 1779.352666]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1779.352704]  ? kasan_save_track+0x14/0x30
[ 1779.352726]  ? __kasan_kmalloc+0x7f/0x90
[ 1779.352747]  ? trace_kmalloc+0x1f/0xb0
[ 1779.352770]  ? legacy_get_tree+0x109/0x220
[ 1779.352798]  ? vfs_get_tree+0x93/0x340
[ 1779.352825]  ? lockdep_init_map_type+0x4b/0x240
[ 1779.352865]  ? __raw_spin_lock_init+0x3a/0x110
[ 1779.352899]  v9fs_session_init+0x1df/0x17a0
[ 1779.352922]  ? do_raw_spin_lock+0x123/0x260
[ 1779.352958]  ? find_held_lock+0x2b/0x80
[ 1779.352990]  ? __create_object+0x59/0x80
[ 1779.353018]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1779.353040]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1779.353062]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1779.353084]  ? __create_object+0x59/0x80
[ 1779.353111]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1779.353142]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1779.353187]  v9fs_mount+0xbc/0x9e0
[ 1779.353215]  ? __pfx_v9fs_mount+0x10/0x10
[ 1779.353245]  ? cap_capable+0xdb/0x3b0
[ 1779.353281]  ? __pfx_v9fs_mount+0x10/0x10
[ 1779.353308]  legacy_get_tree+0x109/0x220
[ 1779.353339]  vfs_get_tree+0x93/0x340
[ 1779.353367]  path_mount+0x122f/0x1d70
[ 1779.353405]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1779.353441]  ? __pfx_path_mount+0x10/0x10
[ 1779.353476]  ? kmem_cache_free+0x2a1/0x460
[ 1779.353507]  ? putname.part.0+0x11b/0x160
[ 1779.353531]  ? getname_flags.part.0+0x1c6/0x540
[ 1779.353560]  ? putname.part.0+0x11b/0x160
[ 1779.353589]  __x64_sys_mount+0x27b/0x300
[ 1779.353625]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1779.353672]  do_syscall_64+0xbf/0x360
[ 1779.353703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.353725] RIP: 0033:0x7fb9c1c2fb19
[ 1779.353742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1779.353763] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1779.353784] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1779.353799] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1779.353812] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1779.353826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1779.353839] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1779.353870]  </TASK>
18:13:37 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x80000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:37 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xa000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:37 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000140)={0x1, "e3eec337e2091381b461bc5e57f4d9a703304b8a72f22b55eb4f1210ee33e90c1419c0dd72af6bb13e95b8e69ae5c8dd5f523957258b0d9f7ab1293e24e2664b811c8743fae51fe63fffbb395d862441e1997caed1e5df8c9d32c9675b5ba200593b6fdbcd9f745c1c2287d60d0ebbc57076d6b5ccf9046f08b35ec28bf0d4d73056010000000000000097b451687a04a4f514e79bbd9e8e3a99364f5a71542e2c056b1a1fa0bbfc00"/179}, 0xbb, 0x0)
r1 = msgget(0x0, 0x140)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000000000d5e500"/161], 0xa1, 0x3, 0x3000)

[ 1779.495028] msdos: Bad value for 'umask'
[ 1779.496270] msdos: Bad value for 'umask'
18:13:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 25)

[ 1779.564130] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1779.609367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:13:46 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:13:46 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x2, "1466557fb61b779cc4d7971aabae99bb90291b0afc2583c261cf00c214f19a9e0fa8cc77"}, 0x2c, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget$private(0x0, 0x42)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/183)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000100)={0x1, "9336d0828c3b8440bcf66b1e946d7a128c25ff03000004652868f59e5a7ee8f1790113aee8708ed7e460b1cef99a358020fa"}, 0x3a, 0x0)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000200)=""/86)

18:13:46 executing program 5:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
copy_file_range(r0, &(0x7f0000000080)=0x4, r1, &(0x7f0000000100)=0x19bc, 0x1, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83132900909544d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xdcc}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1)
syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x2f)
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x200)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='ns/user\x00')

18:13:46 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xe0ffff00000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:46 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:46 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 26)

18:13:46 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:13:46 executing program 1:
syz_usb_connect$cdc_ncm(0x2, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x9, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "1af3"}, {0x5, 0x24, 0x0, 0x63b4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0xf4, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0xb0, 0x8dd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x2, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x7bf, 0x7, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x2, 0x3, 0xf9, 0x8, 0x80}, 0x68, &(0x7f0000000280)={0x5, 0xf, 0x68, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x0, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x5, 0x3, 0x5, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f12c05b009fd36ea7258c23fdf881456"}, @ss_container_id={0x14, 0x10, 0x4, 0x22, "9a923067681e7517d4edd7714daf6207"}, @ss_container_id={0x14, 0x10, 0x4, 0xd2, "0f2b0b967b528a003f2af0cd9fbbf38b"}, @generic={0x15, 0x10, 0xb, "8e95b1fd9532da020da04f562d15c1097028"}]}, 0x5, [{0x4c, &(0x7f0000000300)=@string={0x4c, 0x3, "f2c2965bc19c19d6f2f87a0e98a3ebec6189c84415525baa92b35490dc4696318427bbb3b9932c9a8494b1e2c673538eb64bf698e7555c93517fb20550ff6d150b2d879f12f48add3619"}}, {0x47, &(0x7f0000000380)=@string={0x47, 0x3, "1886a79914106bd0568b7fe87d8e0c83f8db59c831d0c22ae09247c0feaa2f0c24e088b8efef39fe1ae167df56817c51a16411567d2640ec926923af35380721451a63542f"}}, {0x99, &(0x7f0000000400)=@string={0x99, 0x3, "2b65b290bc03d8a5b528909b04b7609dd802f0c50066405a5ebefaa4e6f2378288bfdf78f8defeaa4966516e8cb32ca3a096ed459a1ee00d5941273d9a5022926adf555a76d489fd4f5c61052320e9e734ffdd5c07f2acb5c1bd64493a42c75c0b16ec925be43c8de66201e3f40eb65fdf27907d8d051fe33ed49f198a981b174c19cde298584f71be23123e19c51ea3f32570f68091af"}}, {0x96, &(0x7f0000000580)=@string={0x96, 0x3, "a38ded678fe13c182a210d9f847cd11cd6dfe43345fcf70304a680a2516fa25548b8d2829025796d000d3d76224298e4b45a9843b08016ff505006c3795489311f9b1174239849cf08223ac2aae33f223a8bd9306d33833c7c336664393c99d04d50e34c38d4583165a29a919d64891f5d362e66fd4a670ae4856f7f52e83b120de915e24d41c61248fdb3585602605706c1b2b4"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1004}}]})
msgsnd(0x0, &(0x7f0000000140)={0x0, "67f66c2c9f8de7a10579217159c2ff93d4e4f148a6a59f60e63d88fc3a3e1be5a02f1ea073e2c94baf09157e8263a02eb1d5b48c3d12384e7a6aa97b538b06a2eb676bda18156f40a5f115bed22c4babad1d5175ea822fc41d59cf8cce2948ffa39d78845b881a5317c4cae6b137b6262259c49b5131ebeb2e4d910e36e0533f3951226f0b2aa511ed21859dafa86faeea3e4f416beaa2e43ba0f34a96a1b805a76203613b67f1ef4bb6b56bee7618f54d7633c5401d263da8f980277ea522ff02ded07dbc5debe7c29cabbb"}, 0xd4, 0x800)
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)

[ 1787.994769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1787.996134] FAULT_INJECTION: forcing a failure.
[ 1787.996134] name failslab, interval 1, probability 0, space 0, times 0
[ 1787.997061] CPU: 0 UID: 0 PID: 27519 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1787.997077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1787.997084] Call Trace:
[ 1787.997089]  <TASK>
[ 1787.997094]  dump_stack_lvl+0xfa/0x120
[ 1787.997114]  should_fail_ex+0x4d7/0x5e0
[ 1787.997131]  should_failslab+0xc2/0x120
[ 1787.997144]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1787.997162]  ? perf_trace_lock+0xb5/0x5d0
[ 1787.997177]  ? parse_opts.part.0+0x8d/0x340
[ 1787.997194]  kstrdup+0x3e/0xc0
[ 1787.997212]  parse_opts.part.0+0x8d/0x340
[ 1787.997225]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1787.997244]  ? __pfx_parse_opts.part.0+0x10/0x10
[ 1787.997256]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1787.997276]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1787.997295]  ? lock_release+0xc8/0x290
[ 1787.997316]  p9_fd_create+0x9b/0x530
[ 1787.997328]  ? __pfx_p9_fd_create+0x10/0x10
[ 1787.997341]  ? irq_entries_start+0x4/0xcb0
[ 1787.997354]  ? p9_client_create+0x784/0x11b0
[ 1787.997375]  p9_client_create+0x7eb/0x11b0
[ 1787.997396]  ? __pfx_p9_client_create+0x10/0x10
[ 1787.997413]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1787.997434]  ? kasan_save_track+0x14/0x30
[ 1787.997445]  ? __kasan_kmalloc+0x7f/0x90
[ 1787.997457]  ? trace_kmalloc+0x1f/0xb0
[ 1787.997469]  ? legacy_get_tree+0x109/0x220
[ 1787.997485]  ? vfs_get_tree+0x93/0x340
[ 1787.997500]  ? lockdep_init_map_type+0x4b/0x240
[ 1787.997514]  ? __raw_spin_lock_init+0x3a/0x110
[ 1787.997532]  v9fs_session_init+0x1df/0x17a0
[ 1787.997545]  ? do_raw_spin_lock+0x123/0x260
[ 1787.997561]  ? find_held_lock+0x2b/0x80
[ 1787.997577]  ? __create_object+0x59/0x80
[ 1787.997592]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1787.997605]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1787.997617]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1787.997628]  ? __create_object+0x59/0x80
[ 1787.997643]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1787.997660]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1787.997684]  v9fs_mount+0xbc/0x9e0
[ 1787.997700]  ? __pfx_v9fs_mount+0x10/0x10
[ 1787.997716]  ? cap_capable+0xdb/0x3b0
[ 1787.997737]  ? __pfx_v9fs_mount+0x10/0x10
[ 1787.997751]  legacy_get_tree+0x109/0x220
[ 1787.997768]  vfs_get_tree+0x93/0x340
[ 1787.997783]  path_mount+0x122f/0x1d70
[ 1787.997803]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1787.997823]  ? __pfx_path_mount+0x10/0x10
[ 1787.997842]  ? kmem_cache_free+0x2a1/0x460
[ 1787.997859]  ? putname.part.0+0x11b/0x160
[ 1787.997872]  ? getname_flags.part.0+0x1c6/0x540
[ 1787.997888]  ? putname.part.0+0x11b/0x160
[ 1787.997903]  __x64_sys_mount+0x27b/0x300
[ 1787.997923]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1787.997952]  do_syscall_64+0xbf/0x360
[ 1787.997969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1787.997981] RIP: 0033:0x7fb9c1c2fb19
[ 1787.997990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1787.998001] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1787.998012] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1787.998020] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1787.998028] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1787.998035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1787.998042] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1787.998059]  </TASK>
[ 1788.013423] msdos: Bad value for 'umask'
[ 1788.016707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1788.028206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1788.035289] msdos: Bad value for 'umask'
18:13:46 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:46 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 27)

18:13:46 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000200)={0x0, ""/4096}, 0x1008, 0x1, 0x3800)

[ 1788.124833] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:13:46 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x100000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:46 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 28)

18:13:46 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1788.206728] FAULT_INJECTION: forcing a failure.
[ 1788.206728] name failslab, interval 1, probability 0, space 0, times 0
[ 1788.207671] CPU: 0 UID: 0 PID: 27640 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1788.207687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1788.207695] Call Trace:
[ 1788.207700]  <TASK>
[ 1788.207705]  dump_stack_lvl+0xfa/0x120
[ 1788.207729]  should_fail_ex+0x4d7/0x5e0
[ 1788.207746]  should_failslab+0xc2/0x120
[ 1788.207758]  __kmalloc_cache_noprof+0x73/0x470
[ 1788.207776]  ? p9_fd_create+0x17e/0x530
[ 1788.207793]  ? p9_fd_create+0x17e/0x530
[ 1788.207805]  p9_fd_create+0x17e/0x530
[ 1788.207817]  ? __pfx_p9_fd_create+0x10/0x10
[ 1788.207830]  ? irq_entries_start+0x4/0xcb0
[ 1788.207843]  ? p9_client_create+0x784/0x11b0
[ 1788.207864]  p9_client_create+0x7eb/0x11b0
[ 1788.207886]  ? __pfx_p9_client_create+0x10/0x10
[ 1788.207903]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1788.207924]  ? kasan_save_track+0x14/0x30
[ 1788.207937]  ? __kasan_kmalloc+0x7f/0x90
[ 1788.207948]  ? trace_kmalloc+0x1f/0xb0
[ 1788.207960]  ? legacy_get_tree+0x109/0x220
[ 1788.207976]  ? vfs_get_tree+0x93/0x340
[ 1788.207991]  ? lockdep_init_map_type+0x4b/0x240
[ 1788.208006]  ? __raw_spin_lock_init+0x3a/0x110
[ 1788.208024]  v9fs_session_init+0x1df/0x17a0
[ 1788.208037]  ? do_raw_spin_lock+0x123/0x260
[ 1788.208053]  ? find_held_lock+0x2b/0x80
[ 1788.208070]  ? __create_object+0x59/0x80
[ 1788.208085]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1788.208098]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1788.208110]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1788.208122]  ? __create_object+0x59/0x80
[ 1788.208137]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1788.208153]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1788.208178]  v9fs_mount+0xbc/0x9e0
[ 1788.208194]  ? __pfx_v9fs_mount+0x10/0x10
[ 1788.208209]  ? cap_capable+0xdb/0x3b0
[ 1788.208230]  ? __pfx_v9fs_mount+0x10/0x10
[ 1788.208244]  legacy_get_tree+0x109/0x220
[ 1788.208261]  vfs_get_tree+0x93/0x340
[ 1788.208276]  path_mount+0x122f/0x1d70
[ 1788.208297]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1788.208316]  ? __pfx_path_mount+0x10/0x10
[ 1788.208335]  ? kmem_cache_free+0x2a1/0x460
[ 1788.208352]  ? putname.part.0+0x11b/0x160
[ 1788.208366]  ? getname_flags.part.0+0x1c6/0x540
[ 1788.208382]  ? putname.part.0+0x11b/0x160
[ 1788.208397]  __x64_sys_mount+0x27b/0x300
[ 1788.208417]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1788.208441]  do_syscall_64+0xbf/0x360
[ 1788.208458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1788.208469] RIP: 0033:0x7fb9c1c2fb19
[ 1788.208479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1788.208491] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1788.208502] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1788.208510] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1788.208517] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1788.208524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1788.208531] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1788.208548]  </TASK>
[ 1788.233317] msdos: Bad value for 'umask'
[ 1788.234237] msdos: Bad value for 'umask'
[ 1788.343497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1788.543417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1788.545410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
18:13:56 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:13:56 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x24)
msgsnd(r1, &(0x7f0000000200)={0x1, "6c93a1dcdb534efd4ff5e6d61afbd0677a7c549f64c819044994c1c42ce90c7dcd4c0f449e6b8d1c83198c766ff22d2eadefdba9e6dedf500d02571aafe483984238ac313f6e1eaacafc9ebd1c59ec6ec63e6658ea405eed4b97405d5d9681d52d7e2c0e1c5db91fa526065fbc2396d886b843cb947ecd"}, 0x7f, 0x800)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/107)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x1, 0x3000)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r2 = msgget$private(0x0, 0x654)
msgctl$IPC_RMID(r2, 0x0)

18:13:56 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 29)

18:13:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x200000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:56 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/4096}, 0x1008, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
r3 = msgget$private(0x0, 0x8)
msgsnd(r3, &(0x7f0000001180)={0x1, "9a16502bf98f55c24b14dfc21c2b19df46215dd9903d4400000010005bdff8f0a1ded8d2c563154cb2f10f318a49f080d192cd4c3ef41433ce5fa14b44b292d410f4146d4b467bb526ee5d"}, 0x53, 0x0)

18:13:56 executing program 5:
r0 = msgget(0x0, 0x400)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/232)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0xfffffe59, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x2f)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
close_range(r2, r3, 0x2)
r4 = msgget(0x1, 0x40)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x3}, "f0f7cf55408cff8f3c07d37f4c40bc3e1684477f8b4c912e71c73deffd6eef997ae73be00f4747d604d2a7970da6040db2eba2ab297fba1b8d903b8a0e39f394d9c64942dba289aa3742d5c97f1ade05da8d5680dd3978a9ede0c1e03508a97f14a5adcf1c383b0761b912bdbaaa7af94c9f56ee52218f789d95894ac6f74dbd"}}, 0x94)
msgget(0x1, 0x40)
msgsnd(r4, &(0x7f00000003c0)={0x3, "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"}, 0x1008, 0x800)

18:13:56 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1798.430647] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:13:56 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 30)

18:13:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x3000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1798.473612] msdos: Bad value for 'umask'
[ 1798.485423] msdos: Bad value for 'umask'
[ 1798.500683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1798.524496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1798.530023] FAULT_INJECTION: forcing a failure.
[ 1798.530023] name failslab, interval 1, probability 0, space 0, times 0
[ 1798.530904] CPU: 0 UID: 0 PID: 27714 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1798.530922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1798.530930] Call Trace:
[ 1798.530934]  <TASK>
[ 1798.530939]  dump_stack_lvl+0xfa/0x120
[ 1798.530965]  should_fail_ex+0x4d7/0x5e0
[ 1798.530983]  ? p9_tag_alloc+0x9b/0x820
[ 1798.531002]  should_failslab+0xc2/0x120
[ 1798.531014]  kmem_cache_alloc_noprof+0x5f/0x470
[ 1798.531031]  ? look_up_lock_class+0x56/0x150
[ 1798.531043]  ? stack_trace_save+0x8e/0xc0
[ 1798.531062]  p9_tag_alloc+0x9b/0x820
[ 1798.531081]  ? __pfx_p9_tag_alloc+0x10/0x10
[ 1798.531097]  ? __mmu_notifier_subscriptions_destroy+0xb0/0xc0
[ 1798.531113]  ? perf_trace_lock+0xb5/0x5d0
[ 1798.531126]  ? path_mount+0x122f/0x1d70
[ 1798.531149]  p9_client_prepare_req+0x17f/0x460
[ 1798.531168]  ? __pfx_p9_client_prepare_req+0x10/0x10
[ 1798.531187]  ? find_held_lock+0x2b/0x80
[ 1798.531205]  ? p9_pollwait+0x1ab/0x210
[ 1798.531220]  p9_client_rpc+0x1a0/0xba0
[ 1798.531240]  ? __pfx_p9_client_rpc+0x10/0x10
[ 1798.531257]  ? eventfd_poll+0xe2/0x150
[ 1798.531273]  ? __pfx_eventfd_poll+0x10/0x10
[ 1798.531289]  ? p9_fd_poll+0x1e0/0x2c0
[ 1798.531304]  ? p9_fd_create+0x34e/0x530
[ 1798.531317]  ? __pfx_p9_fd_create+0x10/0x10
[ 1798.531331]  ? p9_client_create+0x784/0x11b0
[ 1798.531352]  p9_client_create+0xbd1/0x11b0
[ 1798.531374]  ? __pfx_p9_client_create+0x10/0x10
[ 1798.531391]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1798.531412]  ? kasan_save_track+0x14/0x30
[ 1798.531423]  ? __kasan_kmalloc+0x7f/0x90
[ 1798.531435]  ? trace_kmalloc+0x1f/0xb0
[ 1798.531447]  ? legacy_get_tree+0x109/0x220
[ 1798.531463]  ? vfs_get_tree+0x93/0x340
[ 1798.531478]  ? lockdep_init_map_type+0x4b/0x240
[ 1798.531492]  ? __raw_spin_lock_init+0x3a/0x110
[ 1798.531510]  v9fs_session_init+0x1df/0x17a0
[ 1798.531523]  ? do_raw_spin_lock+0x123/0x260
[ 1798.531539]  ? find_held_lock+0x2b/0x80
[ 1798.531555]  ? __create_object+0x59/0x80
[ 1798.531570]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1798.531583]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1798.531595]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1798.531606]  ? __create_object+0x59/0x80
[ 1798.531621]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1798.531637]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1798.531663]  v9fs_mount+0xbc/0x9e0
[ 1798.531678]  ? __pfx_v9fs_mount+0x10/0x10
[ 1798.531694]  ? cap_capable+0xdb/0x3b0
[ 1798.531714]  ? __pfx_v9fs_mount+0x10/0x10
[ 1798.531728]  legacy_get_tree+0x109/0x220
[ 1798.531745]  vfs_get_tree+0x93/0x340
[ 1798.531760]  path_mount+0x122f/0x1d70
[ 1798.531780]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1798.531799]  ? __pfx_path_mount+0x10/0x10
[ 1798.531818]  ? kmem_cache_free+0x2a1/0x460
[ 1798.531835]  ? putname.part.0+0x11b/0x160
[ 1798.531848]  ? getname_flags.part.0+0x1c6/0x540
[ 1798.531864]  ? putname.part.0+0x11b/0x160
[ 1798.531879]  __x64_sys_mount+0x27b/0x300
[ 1798.531899]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1798.531924]  do_syscall_64+0xbf/0x360
[ 1798.531941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1798.531953] RIP: 0033:0x7fb9c1c2fb19
[ 1798.531963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1798.531975] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1798.531986] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1798.531994] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1798.532001] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1798.532008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1798.532015] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1798.532032]  </TASK>
18:13:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x300000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1798.638556] msdos: Bad value for 'umask'
[ 1798.642190] msdos: Bad value for 'umask'
18:13:56 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:13:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x7000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:13:56 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 31)

18:13:56 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x400000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:13:56 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1798.738705] msdos: Bad value for 'umask'
[ 1798.745778] msdos: Bad value for 'umask'
[ 1798.753099] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1798.868930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:14:06 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000240)=""/187)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000200), 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01603bdbdc00000000000000"], 0x8, 0x0)
r2 = msgget(0x1, 0x729)
msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000089252742cb416b18fcd84f68fe11b7b0ef20bc55ba528eec00da3891f5ff393f0549c56c54c983833b5fb0ac361eb017d464c0ff3760a92128b0eea2c6da85d869394ee74cbdd317895ee9589fe9e5e477d265eff4c63474ce9dc9dd90d55ac6ddbc8f6f89ff5b31fe1725052b8beb97aff3521abb9a196abfdd30564adba4a066f32c2b9b549824a55eea73d3f22e7c656f3659e0498fe275c82086fd71724ca88d7325931ce80563649696150686dbef1dfcecffde294ed4f5e8d7fb8a9f6117109a8d21"], 0xcd, 0x800)

18:14:06 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/113}, 0x79, 0x2, 0x1800)

18:14:06 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x500000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:14:06 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8100000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:14:06 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:14:06 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {0xff}, @device_a, @device_b}, 0x10)

18:14:06 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:14:06 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 32)

[ 1808.659275] FAULT_INJECTION: forcing a failure.
[ 1808.659275] name failslab, interval 1, probability 0, space 0, times 0
[ 1808.660378] CPU: 0 UID: 0 PID: 27921 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1808.660394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1808.660402] Call Trace:
[ 1808.660406]  <TASK>
[ 1808.660410]  dump_stack_lvl+0xfa/0x120
[ 1808.660431]  should_fail_ex+0x4d7/0x5e0
[ 1808.660447]  ? p9_fcall_init+0x97/0x290
[ 1808.660463]  should_failslab+0xc2/0x120
[ 1808.660475]  __kmalloc_noprof+0xb4/0x4b0
[ 1808.660491]  ? __create_object+0x59/0x80
[ 1808.660511]  p9_fcall_init+0x97/0x290
[ 1808.660530]  p9_tag_alloc+0x169/0x820
[ 1808.660548]  ? __pfx_p9_tag_alloc+0x10/0x10
[ 1808.660569]  ? perf_trace_lock+0xb5/0x5d0
[ 1808.660582]  ? path_mount+0x122f/0x1d70
[ 1808.660606]  p9_client_prepare_req+0x17f/0x460
[ 1808.660625]  ? __pfx_p9_client_prepare_req+0x10/0x10
[ 1808.660645]  ? find_held_lock+0x2b/0x80
[ 1808.660662]  ? p9_pollwait+0x1ab/0x210
[ 1808.660678]  p9_client_rpc+0x1a0/0xba0
[ 1808.660699]  ? __pfx_p9_client_rpc+0x10/0x10
[ 1808.660716]  ? eventfd_poll+0xe2/0x150
[ 1808.660732]  ? __pfx_eventfd_poll+0x10/0x10
[ 1808.660749]  ? p9_fd_poll+0x1e0/0x2c0
[ 1808.660765]  ? p9_fd_create+0x34e/0x530
[ 1808.660778]  ? __pfx_p9_fd_create+0x10/0x10
[ 1808.660792]  ? p9_client_create+0x784/0x11b0
[ 1808.660813]  p9_client_create+0xbd1/0x11b0
[ 1808.660836]  ? __pfx_p9_client_create+0x10/0x10
[ 1808.660854]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1808.660876]  ? kasan_save_track+0x14/0x30
[ 1808.660888]  ? __kasan_kmalloc+0x7f/0x90
[ 1808.660900]  ? trace_kmalloc+0x1f/0xb0
[ 1808.660912]  ? legacy_get_tree+0x109/0x220
[ 1808.660928]  ? vfs_get_tree+0x93/0x340
[ 1808.660943]  ? lockdep_init_map_type+0x4b/0x240
[ 1808.660962]  ? __raw_spin_lock_init+0x3a/0x110
[ 1808.660981]  v9fs_session_init+0x1df/0x17a0
[ 1808.660995]  ? do_raw_spin_lock+0x123/0x260
[ 1808.661011]  ? find_held_lock+0x2b/0x80
[ 1808.661028]  ? __create_object+0x59/0x80
[ 1808.661042]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1808.661055]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1808.661068]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1808.661079]  ? __create_object+0x59/0x80
[ 1808.661095]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1808.661119]  v9fs_mount+0xbc/0x9e0
[ 1808.661141]  ? __pfx_v9fs_mount+0x10/0x10
[ 1808.661158]  ? cap_capable+0xdb/0x3b0
[ 1808.661178]  ? __pfx_v9fs_mount+0x10/0x10
[ 1808.661193]  legacy_get_tree+0x109/0x220
[ 1808.661211]  vfs_get_tree+0x93/0x340
[ 1808.661226]  path_mount+0x122f/0x1d70
[ 1808.661246]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1808.661266]  ? __pfx_path_mount+0x10/0x10
[ 1808.661286]  ? kmem_cache_free+0x2a1/0x460
[ 1808.661303]  ? putname.part.0+0x11b/0x160
[ 1808.661316]  ? getname_flags.part.0+0x1c6/0x540
[ 1808.661333]  ? putname.part.0+0x11b/0x160
[ 1808.661349]  __x64_sys_mount+0x27b/0x300
[ 1808.661369]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1808.661395]  do_syscall_64+0xbf/0x360
[ 1808.661412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.661425] RIP: 0033:0x7fb9c1c2fb19
[ 1808.661434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1808.661446] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1808.661458] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1808.661466] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1808.661473] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1808.661480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1808.661487] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1808.661506]  </TASK>
[ 1808.671875] msdos: Bad value for 'umask'
[ 1808.680363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1808.694262] msdos: Bad value for 'umask'
18:14:06 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003bdd0927e23609d12155ca00e44c6aed60adce31a64fa2c816b56b9ad8834b72d0aebade762b75e1682e4a414cef84ceb6d6de5ac285b2013949711dcc1e96c23e8ab0597fe032ea2799051fd1532fba150ff0be9ef5943f2f3493d5a7b50366d717d8c6bbd78a36f6e3c9815675a85d2de950a571af5f02e0700836ddee45848f2a7fdab2"], 0xa1, 0x3, 0x3000)

18:14:06 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

[ 1808.739865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:14:06 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 33)

18:14:07 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget(0x3, 0x440)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/95}, 0x67, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:14:07 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x600000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1808.813793] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:14:07 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x9000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:14:07 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect(0x5, 0x14d, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0xdd, 0x22, 0x2b, 0x8, 0x7392, 0x4085, 0x304b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13b, 0x2, 0x3d, 0xe4, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x2, 0x5, 0xe4, 0x6c, 0xc3, 0x0, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x7bf, 0x2, 0x19, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x86, 0x4, 0x8, [@generic={0x2c, 0x23, "976be0613fd860bdd0c1c8ef57ffea54eabcd3f138c53a433e02220e06efed11add7896abe85f5004ad8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xdb, 0x200}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x3a, 0x1, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x26, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}, @generic={0xb, 0x11, "b6daa3397a9a26d310"}]}}]}}, {{0x9, 0x4, 0x91, 0x1, 0x3, 0xb6, 0x10, 0x37, 0x4, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2ae3, 0x3, 0x80, "4a65cedab71e33"}, @as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xbb, 0x9, "d23389"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x401, 0x7ff, 0x6, "2ebb011aaa28"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x49, 0x1, 0x3f, 0x6, "1a"}]}, @generic={0x44, 0xb, "272decf3e133c0c5924c28bf5b5a45a98977cc92173f8aa119c93af437e76b9674f968337e009033b89578ede70c042a0f11cce81c4c16eaa04f871309267d979034"}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1f, 0x1, 0xb8}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xff, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0xc3, 0x20, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x1f, 0xfe, 0x10, 0x4}, 0x30, &(0x7f0000000480)={0x5, 0xf, 0x30, 0x3, [@generic={0x14, 0x10, 0x1, "74a021d4b2b17df12e22483bfab40a6480"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "9c9b4d5fdb3d07b210b1fbec604e0927"}, @ptm_cap={0x3}]}, 0x3, [{0xb3, &(0x7f00000004c0)=@string={0xb3, 0x3, "c57bc44806bfe80eea08b805edd0728f6c2fdf44ce6ab5eba798a85fa5ef5c696eb146c9f9e434e76a489e93df9aff2dbe357c6212d86b6b414f57e670a511454966a64260e0a22d5260d46747b2d750920dfd6a701f186e4d864f6f897ccfa83e7857a23a256ec3831efaeadb156eddb7988d159e38938cefcd0eb56efda7182af450c672b874314e88e9c14f9548ca07fb9c671b37738395a8b02d17667056f479f81c069b4e005635bbbc029d8b6fb2"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0x9c, &(0x7f00000005c0)=@string={0x9c, 0x3, "0c6f16a81160bd3711d739e00449c657925a25eb5d974dc2ac832603e893696b680ecdc33b367141c17549de0c6f69b5b6240fa864b1ae8ec40fe8a93dfd745c1f820c8a1aa651a0ef04f9cd447136d932b40633ad0a08d4d46eaf8b3517f4ace721913821b8589f9f28b05f751f643a76e579fe8238ec3a01e150cb5b63b1d112e02b32e554ae6a4a1edc967a521b3f02bdbcfbe599edba4c87"}}]})
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x1, 0x22)
msgsnd(r1, &(0x7f00000001c0)={0x0, "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"}, 0x103, 0x800)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:14:07 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 34)

[ 1808.876234] msdos: Bad value for 'umask'
[ 1808.882856] msdos: Bad value for 'umask'
18:14:07 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x3, 0x0)

18:14:07 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x700000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1808.923079] FAULT_INJECTION: forcing a failure.
[ 1808.923079] name failslab, interval 1, probability 0, space 0, times 0
[ 1808.924135] CPU: 0 UID: 0 PID: 28042 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1808.924152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1808.924160] Call Trace:
[ 1808.924164]  <TASK>
[ 1808.924169]  dump_stack_lvl+0xfa/0x120
[ 1808.924190]  should_fail_ex+0x4d7/0x5e0
[ 1808.924205]  ? p9_fcall_init+0x97/0x290
[ 1808.924220]  should_failslab+0xc2/0x120
[ 1808.924233]  __kmalloc_noprof+0xb4/0x4b0
[ 1808.924249]  ? __create_object+0x59/0x80
[ 1808.924268]  p9_fcall_init+0x97/0x290
[ 1808.924285]  p9_tag_alloc+0x20a/0x820
[ 1808.924304]  ? __pfx_p9_tag_alloc+0x10/0x10
[ 1808.924323]  ? perf_trace_lock+0xb5/0x5d0
[ 1808.924337]  ? path_mount+0x122f/0x1d70
[ 1808.924360]  p9_client_prepare_req+0x17f/0x460
[ 1808.924378]  ? __pfx_p9_client_prepare_req+0x10/0x10
[ 1808.924399]  ? find_held_lock+0x2b/0x80
[ 1808.924416]  ? p9_pollwait+0x1ab/0x210
[ 1808.924431]  p9_client_rpc+0x1a0/0xba0
[ 1808.924451]  ? __pfx_p9_client_rpc+0x10/0x10
[ 1808.924468]  ? eventfd_poll+0xe2/0x150
[ 1808.924485]  ? __pfx_eventfd_poll+0x10/0x10
[ 1808.924501]  ? p9_fd_poll+0x1e0/0x2c0
[ 1808.924516]  ? p9_fd_create+0x34e/0x530
[ 1808.924528]  ? __pfx_p9_fd_create+0x10/0x10
[ 1808.924542]  ? p9_client_create+0x784/0x11b0
[ 1808.924563]  p9_client_create+0xbd1/0x11b0
[ 1808.924585]  ? __pfx_p9_client_create+0x10/0x10
[ 1808.924602]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1808.924624]  ? kasan_save_track+0x14/0x30
[ 1808.924635]  ? __kasan_kmalloc+0x7f/0x90
[ 1808.924647]  ? trace_kmalloc+0x1f/0xb0
[ 1808.924659]  ? legacy_get_tree+0x109/0x220
[ 1808.924674]  ? vfs_get_tree+0x93/0x340
[ 1808.924688]  ? lockdep_init_map_type+0x4b/0x240
[ 1808.924702]  ? __raw_spin_lock_init+0x3a/0x110
[ 1808.924721]  v9fs_session_init+0x1df/0x17a0
[ 1808.924734]  ? do_raw_spin_lock+0x123/0x260
[ 1808.924750]  ? find_held_lock+0x2b/0x80
[ 1808.924766]  ? __create_object+0x59/0x80
[ 1808.924781]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1808.924794]  ? __pfx_v9fs_session_init+0x10/0x10
[ 1808.924806]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1808.924818]  ? __create_object+0x59/0x80
[ 1808.924834]  ? __kmalloc_cache_noprof+0x369/0x470
[ 1808.924850]  ? cred_has_capability.isra.0+0x1be/0x2c0
[ 1808.924875]  v9fs_mount+0xbc/0x9e0
[ 1808.924891]  ? __pfx_v9fs_mount+0x10/0x10
[ 1808.924907]  ? cap_capable+0xdb/0x3b0
[ 1808.924927]  ? __pfx_v9fs_mount+0x10/0x10
[ 1808.924944]  legacy_get_tree+0x109/0x220
[ 1808.924970]  vfs_get_tree+0x93/0x340
[ 1808.924988]  path_mount+0x122f/0x1d70
[ 1808.925007]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1808.925031]  ? __pfx_path_mount+0x10/0x10
[ 1808.925052]  ? kmem_cache_free+0x2a1/0x460
[ 1808.925072]  ? putname.part.0+0x11b/0x160
[ 1808.925087]  ? getname_flags.part.0+0x1c6/0x540
[ 1808.925103]  ? putname.part.0+0x11b/0x160
[ 1808.925118]  __x64_sys_mount+0x27b/0x300
[ 1808.925145]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1808.925170]  do_syscall_64+0xbf/0x360
[ 1808.925187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.925199] RIP: 0033:0x7fb9c1c2fb19
[ 1808.925209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1808.925220] RSP: 002b:00007fb9bf1a5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1808.925231] RAX: ffffffffffffffda RBX: 00007fb9c1d42f60 RCX: 00007fb9c1c2fb19
[ 1808.925239] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000
[ 1808.925246] RBP: 00007fb9bf1a51d0 R08: 00000000200000c0 R09: 0000000000000000
[ 1808.925254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1808.925260] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1808.925277]  </TASK>
[ 1808.954841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1808.958402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1808.979164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1808.982224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1809.012563] msdos: Bad value for 'umask'
18:14:07 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 35)

[ 1809.022867] msdos: Bad value for 'umask'
18:14:07 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1809.056458] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1809.084522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1809.546220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1809.550366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1809.552581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1809.555993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1817.996053] Bluetooth: hci6: command 0x0406 tx timeout
18:14:18 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 36)

18:14:18 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:14:18 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x0, "63a0f5eb1bf4185a2f881f4f692c253051114e1768a5b0812e0cf28ebf784996c7a0826e0cb206ae3b2fa1180c43cb811fdcee7630f1206e9e2b647885d836812a6cb3a41848ae01f2ef3d3d60"}, 0x55, 0x800)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/155}, 0xa3, 0x3, 0x3000)

18:14:18 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000009000000000000000000000008000000000000000000000000930000d2600b0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00"/134], 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01031234000002000000"], 0x8, 0x0)
r1 = msgget$private(0x0, 0x30)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000140)=""/132)
r2 = msgget$private(0x0, 0x30)
msgsnd(r0, &(0x7f0000000200)={0x1, "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"}, 0x102, 0x0)
r3 = msgget$private(0x0, 0x400)
msgrcv(r3, &(0x7f0000000100)={0x0, ""/43}, 0x33, 0x2, 0x800)
msgctl$IPC_RMID(r2, 0x0)

18:14:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x800000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:14:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @random="6ac89f0ed44e", {0x4, 0xd4d}}, 0x100, 0x2998, {}, @void, @void, [{0xdd, 0x7b, "cd5b7135f5e4441888d9bb79c1522505a8a81f9432d2f41f37e312b49d46dfe381a3a38996f2946da9741a8ab1aa39a4426f9ce5fb4cef45c9668ba5e2320e36577d35d386ecfb4fd7ddfaa06ef3c27f2e40aef5037146553052caa69eec88f28460347d95a24771a5930fb040422f247c95f75a73419206999030"}, {0xdd, 0x35, "88675fc278fc891ccf7eabc8f2c544c5569a55b01147e6e664a89b9ed9eec4a556ff89bd4a4497efa98730f17e5997c7147d8817ac"}, {0xdd, 0x88, "dd872107d22f3d3144feaf3b3e03d2be4cd426622c627c30a48c8a386edd223a4ccb861cf55150b08474c9b6de0655d923547565ce2cdf6bff72b732fbc777604805003d8f3d9a9a6a90275c1659977c3b066f1b683b04d950c01477637f19f0bb6fcd252f5e8024b3441b881dad7dab773ea142a9f2473874b5570d90415b49d372fbb1f8dafaa1"}, {0xdd, 0x37, "21fe9d74e3cda523387f261466639e45023ed2475e671b2087be7abe6d65636641282ef8598017378a8b39a53d5e95077ac5d2ec6db79f"}]}, 0x195)

18:14:18 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x0)

18:14:18 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1819.936314] msdos: Bad value for 'umask'
[ 1819.938713] msdos: Bad value for 'umask'
[ 1819.981388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1819.982108] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
18:14:18 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:14:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x900000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1819.999800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1820.040381] msdos: Bad value for 'umask'
[ 1820.043638] msdos: Bad value for 'umask'
18:14:18 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x0)

18:14:18 executing program 1:
r0 = msgget$private(0x0, 0xc5)
msgsnd(r0, &(0x7f0000000000)={0x3, "770bfbb4d1c186f52bce79c8d4af85738b156b7637d82a8c33c36bb4bd8573f8400c2c70fa78f3b3190ad5d92bddbae47c27dc23d98288b56d8bb4a896a2353420ea6c12d09f6f1d453fc6ce3a3bfdd211b70cdd2538ab703d"}, 0x61, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 1820.334487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:14:26 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x10000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:14:26 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xa00000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:14:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x50112819af8d25a1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:14:26 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x0)

18:14:26 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 37)

18:14:26 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:14:26 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/195}, 0xcb, 0x1, 0x1000)

18:14:26 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/123}, 0x83, 0x0, 0x0)
r1 = msgget$private(0x0, 0x400)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000100)=""/156)
msgsnd(r0, &(0x7f0000000000)={0x1, "95373e9fc4666d75c6"}, 0x11, 0x0)

[ 1827.963601] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:14:26 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 38)

[ 1827.995268] msdos: Bad value for 'umask'
[ 1828.002621] msdos: Bad value for 'umask'
[ 1828.052414] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:14:26 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xb00000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:14:26 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x0, 0x0)

18:14:26 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x20000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:14:26 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 39)

[ 1828.108920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1828.129806] msdos: Bad value for 'umask'
[ 1828.138484] msdos: Bad value for 'umask'
18:14:26 executing program 1:
r0 = socket$inet6(0xa, 0xa, 0x9)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl0\x00', r1, 0x2f, 0x3f, 0x80, 0x10000, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x700, 0x0, 0x8, 0x1}})
r2 = msgget$private(0x0, 0x0)
msgsnd(r2, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r2, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r3 = msgget(0x3, 0x4c2)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
setresuid(0x0, r4, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000040)=0xc)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/84, 0x54}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x2000)
msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x3, r4, r5, r6, 0xee00, 0x8, 0x80}, 0x0, 0x0, 0x37c, 0x4, 0x20, 0x9, 0x200, 0x1ff, 0x8001, 0x8000, 0x0, 0xffffffffffffffff})

[ 1828.154814] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1828.174223] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:14:26 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:14:26 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x1000000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:14:26 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 40)

18:14:26 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f00000002c0)={0x2, "3f514aec686caf862574761a39155b43e11223317160a08ee91c262c010885a857ccb17621354a18abc58985c874173d0b13c2cadead9498bc54a57ea4700be1d164952aeede214991d777ff31604e37856d286a35faba8a807562cc9ed892fc32f10bd2f6e02c028b6e5ad867f588608894e6df004bc2ab120143035dee13e971242c3b94f6604549fd0092f3c934734ef3f21814d09ea41d3cf5bdc6d970cfaa75cb3608e1eab24a9271bf4d4a79e2906084ded8e1d97dcbf17b66590e9d6c4d3102105fd236b92c21618341141579f81184fef740bb"}, 0xdf, 0x800)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x86, 0x2, 0x2000)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/255)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1828.252503] msdos: Bad value for 'umask'
[ 1828.254922] msdos: Bad value for 'umask'
[ 1828.288191] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1830.818674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1830.823073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1830.826131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1830.833526] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1830.836260] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1832.908088] Bluetooth: hci6: command tx timeout
[ 1834.957060] Bluetooth: hci6: command tx timeout
[ 1837.004075] Bluetooth: hci6: command tx timeout
[ 1839.052340] Bluetooth: hci6: command tx timeout
[ 1848.968060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1848.969384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1849.047248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1849.048589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1849.393405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:00 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000140)={0x0, ""/239}, 0xf7, 0x1, 0x800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x2, 0x0)

18:15:00 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x20100000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:00 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x2000000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:15:00 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x0, 0x0)

18:15:00 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x440)
msgsnd(r1, &(0x7f0000000000)={0x0, "b122cd186aea8c889e2ca35c50d755d118ddd39e6a6d8759580a976f3614419fbdc9480e805fd1128760da6a940f1feebd1ddf002063ed0cd499bc10f19798fc2041110bd015808e0fdaa3f72786493ed61614d52fe590fb3ea6f147004a3e22f3959798c6b62eac170b16ea0cc4a930afc6df0558c9820983f82fabc80ffdbf705eda4bd02ce70d30ff1ab819ff2efb87e5a5ccb1ebf143734fe0be4af7f06f8114eeb6916674b0f2640baff9b9ec2118a0c2417824631523c81cdedc77c794057fe856962f3082c394efae67e142bd922251f124b7d5"}, 0xdf, 0x800)
msgget(0x0, 0x0)
r2 = msgget(0x0, 0x4)
msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000180)=""/25)
r3 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgsnd(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000bae478af234c328a655cd6195ec500e030bb697ef40b3d8c8c767cf011930aa0c13ea6"], 0x2b, 0x0)
msgrcv(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x86, 0x2, 0x2000)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000300)=""/219)
msgrcv(r2, &(0x7f0000000400)={0x0, ""/225}, 0xe9, 0x2, 0x2800)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:15:00 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 41)

18:15:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x6, 0x9, 0x0, 0x0, 0x9, 0x9080, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x7587e18a620165f7, @perf_config_ext={0x401, 0x2eae1939}, 0x8024, 0x1, 0x2, 0x0, 0x1, 0x6, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xc, r1, 0x1)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:15:00 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1861.886604] msdos: Bad value for 'umask'
[ 1861.894739] msdos: Bad value for 'umask'
[ 1861.899240] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1861.913828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1861.925231] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
18:15:00 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x0, 0x0)

18:15:00 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x2010000000000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:15:00 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 42)

18:15:00 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x40000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:00 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/115}, 0x7b, 0x2, 0x2400)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1862.101065] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1862.125397] msdos: Bad value for 'umask'
[ 1862.138627] msdos: Bad value for 'umask'
18:15:00 executing program 7:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect(0x5, 0x14d, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0xdd, 0x22, 0x2b, 0x8, 0x7392, 0x4085, 0x304b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13b, 0x2, 0x3d, 0xe4, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x2, 0x5, 0xe4, 0x6c, 0xc3, 0x0, [@uac_as], [{{0x9, 0x5, 0x9, 0x0, 0x7bf, 0x2, 0x19, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x86, 0x4, 0x8, [@generic={0x2c, 0x23, "976be0613fd860bdd0c1c8ef57ffea54eabcd3f138c53a433e02220e06efed11add7896abe85f5004ad8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xdb, 0x200}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x3a, 0x1, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x26, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}, @generic={0xb, 0x11, "b6daa3397a9a26d310"}]}}]}}, {{0x9, 0x4, 0x91, 0x1, 0x3, 0xb6, 0x10, 0x37, 0x4, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2ae3, 0x3, 0x80, "4a65cedab71e33"}, @as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xbb, 0x9, "d23389"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x401, 0x7ff, 0x6, "2ebb011aaa28"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x49, 0x1, 0x3f, 0x6, "1a"}]}, @generic={0x44, 0xb, "272decf3e133c0c5924c28bf5b5a45a98977cc92173f8aa119c93af437e76b9674f968337e009033b89578ede70c042a0f11cce81c4c16eaa04f871309267d979034"}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1f, 0x1, 0xb8}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xff, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0xc3, 0x20, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x1f, 0xfe, 0x10, 0x4}, 0x30, &(0x7f0000000480)={0x5, 0xf, 0x30, 0x3, [@generic={0x14, 0x10, 0x1, "74a021d4b2b17df12e22483bfab40a6480"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "9c9b4d5fdb3d07b210b1fbec604e0927"}, @ptm_cap={0x3}]}, 0x3, [{0xb3, &(0x7f00000004c0)=@string={0xb3, 0x3, "c57bc44806bfe80eea08b805edd0728f6c2fdf44ce6ab5eba798a85fa5ef5c696eb146c9f9e434e76a489e93df9aff2dbe357c6212d86b6b414f57e670a511454966a64260e0a22d5260d46747b2d750920dfd6a701f186e4d864f6f897ccfa83e7857a23a256ec3831efaeadb156eddb7988d159e38938cefcd0eb56efda7182af450c672b874314e88e9c14f9548ca07fb9c671b37738395a8b02d17667056f479f81c069b4e005635bbbc029d8b6fb2"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0x9c, &(0x7f00000005c0)=@string={0x9c, 0x3, "0c6f16a81160bd3711d739e00449c657925a25eb5d974dc2ac832603e893696b680ecdc33b367141c17549de0c6f69b5b6240fa864b1ae8ec40fe8a93dfd745c1f820c8a1aa651a0ef04f9cd447136d932b40633ad0a08d4d46eaf8b3517f4ace721913821b8589f9f28b05f751f643a76e579fe8238ec3a01e150cb5b63b1d112e02b32e554ae6a4a1edc967a521b3f02bdbcfbe599edba4c87"}}]})
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x1, 0x22)
msgsnd(r1, &(0x7f00000001c0)={0x0, "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"}, 0x103, 0x800)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:15:00 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 43)

18:15:00 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1862.228490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1862.230687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1862.237169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1862.242781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1862.300267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1862.347604] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:15:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {0xff}, @device_a, @device_b}, 0x10)

18:15:10 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x8008662c, &(0x7f0000000200)="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")
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x139040, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:15:10 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8cffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x20, 0x80, 0x0, 0x2, 0x80b, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x2010, 0x20, 0x7, 0x4, 0x9, 0x7, 0x2a, 0x0, 0x9, 0x0, 0x9}, r1, 0x7, 0xffffffffffffffff, 0xa)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:15:10 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 44)

18:15:10 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:15:10 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0x8cffffff00000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:15:10 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x3, 0x40e)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000140)=""/66)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgsnd(r2, &(0x7f00000001c0)={0x2, "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"}, 0x1008, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1872.135477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1872.164362] msdos: Bad value for 'umask'
18:15:10 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/168}, 0xb0, 0x0, 0x1800)
msgctl$IPC_RMID(r0, 0x0)

[ 1872.173668] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1872.175707] msdos: Bad value for 'umask'
[ 1872.178664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1872.180325] FAULT_INJECTION: forcing a failure.
[ 1872.180325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1872.181255] CPU: 0 UID: 0 PID: 29189 Comm: syz-executor.2 Not tainted 6.16.0-rc5-next-20250708 #1 PREEMPT(voluntary) 
[ 1872.181271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1872.181278] Call Trace:
[ 1872.181283]  <TASK>
[ 1872.181287]  dump_stack_lvl+0xfa/0x120
[ 1872.181309]  should_fail_ex+0x4d7/0x5e0
[ 1872.181331]  _copy_to_user+0x32/0xd0
[ 1872.181349]  simple_read_from_buffer+0xe0/0x180
[ 1872.181369]  proc_fail_nth_read+0x189/0x270
[ 1872.181390]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1872.181409]  ? security_file_permission+0x22/0x90
[ 1872.181424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1872.181443]  vfs_read+0x1eb/0xbe0
[ 1872.181465]  ? __pfx_vfs_read+0x10/0x10
[ 1872.181484]  ? lock_release+0xc8/0x290
[ 1872.181501]  ? __fget_files+0x20d/0x3b0
[ 1872.181527]  ksys_read+0x121/0x240
[ 1872.181544]  ? __pfx_ksys_read+0x10/0x10
[ 1872.181569]  do_syscall_64+0xbf/0x360
[ 1872.181586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1872.181599] RIP: 0033:0x7fb9c1be269c
[ 1872.181608] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1872.181619] RSP: 002b:00007fb9bf1a5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1872.181631] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb9c1be269c
[ 1872.181639] RDX: 000000000000000f RSI: 00007fb9bf1a51e0 RDI: 0000000000000007
[ 1872.181646] RBP: 00007fb9bf1a51d0 R08: 0000000000000000 R09: 0000000000000000
[ 1872.181653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1872.181660] R13: 00007fff68d1c59f R14: 00007fb9bf1a5300 R15: 0000000000022000
[ 1872.181679]  </TASK>
[ 1872.195874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:10 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgget$private(0x0, 0x2)
r1 = msgget$private(0x0, 0x305)
msgrcv(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9b, 0x3, 0x3000)
r2 = msgget(0x3, 0x102)
msgrcv(r1, &(0x7f0000000240)={0x0, ""/252}, 0x104, 0x1, 0x1800)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000000)=""/230)

18:15:10 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xf6ffffff00000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:15:10 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:10 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:15:10 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xc0ed0000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:10 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget(0x2, 0x80)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x1000)=nil)
msgsnd(r1, &(0x7f0000000140)={0x1, "c5c6bd8b3dd1897ced5e631ca9b3aaceb0c5f93b24c076d3d7fb5f209a317001fa184c2589b756ae7b691b053e86f46122e28d32eaa1c00f3a25a77860102e75dd28a668869192e0352aa7a7bbf98a70349d3e5d99e1a90a8ee8ffac75f201b14751d3a4cc86a5683b2ae16a356e854f0dd845450cf48b25b00297c3dc39dde8645656f50048ca325f286e9d9e9e1cf237c5cd9fddbbb806a062cd45c0fef5f08bc8156480fda42442e37037e2fa8bbb69e4c9383bd334f85d3900402426638f76"}, 0xc9, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgrcv(r1, &(0x7f0000000240)={0x0, ""/84}, 0x5c, 0x0, 0x6000)

[ 1872.357568] msdos: Bad value for 'umask'
[ 1872.359452] msdos: Bad value for 'umask'
18:15:10 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xf9fdffff00000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1872.403341] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 1872.419976] msdos: Bad value for 'umask'
[ 1872.423153] msdos: Bad value for 'umask'
[ 1872.468589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:19 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:19 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask={'umask', 0x3d, 0xffffffff00000000}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:15:19 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xf6ffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:19 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x0)

18:15:19 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000000}, 0x0, 0x0, 0x0, 0x4, 0x40000000000001}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:15:19 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/227)
r2 = msgget$private(0x0, 0x4a0)
msgctl$IPC_RMID(r2, 0x0)

18:15:19 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {0xff}, @device_a, @device_b}, 0x10)

18:15:19 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1881.695259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.710479] msdos: Bad value for 'umask'
[ 1881.715393] msdos: Bad value for 'umask'
[ 1881.717391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:19 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000140)={0x0, "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"/337}, 0x159, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000e9a0000000000000000000000000000000000000000e9000000000000000000000000000000000000eaffffff000000"], 0xa1, 0x3, 0x3000)

[ 1881.737668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:20 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask, 0x22}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:15:20 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:20 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeff0000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1881.881590] msdos: Bad value for 'umask'
[ 1881.886848] msdos: Bad value for 'umask'
18:15:20 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:15:20 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x22, '936'}}]})

18:15:20 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1882.026840] msdos: Unknown parameter 'codepage"936'
[ 1882.031696] msdos: Unknown parameter 'codepage"936'
18:15:30 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xffff0000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:30 executing program 1:
r0 = msgget$private(0x0, 0x2)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/75}, 0x53, 0x1, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/161], 0xa1, 0x3, 0x3000)

18:15:30 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000140)={0x3, "8a31f81ebdf69ce5ec43f6acba19889da5495dc43273637213871d3838c27074f50e8c1dfddab8b0782c4e532acb461724a8cb407dfe56f24dab16e22b436ec0632aa317ea2e073ddcbe6545e567d72f90c622f866cb6846d48f9f47a73db183e5c531738274fd8e9db0279a791ec81b31f415b22fa9b894c40d12cb29a4fcdb4e8b892547cdf0a88df11fec459a7983574a"}, 0x9a, 0x800)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:15:30 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x2c, '936'}}]})

18:15:30 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {0xff}, @device_a, @device_b}, 0x10)

18:15:30 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:15:30 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1892.662943] msdos: Bad value for 'codepage'
[ 1892.670380] msdos: Bad value for 'codepage'
[ 1892.684255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1892.699829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1892.713049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:30 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}, 0x22}]})

18:15:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfffffe00, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:31 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039e79e87f1db00"/161], 0xa1, 0x3, 0x3000)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}}}, &(0x7f0000000340)=0xe8)
read$ptp(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000020c0), 0x193000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002100)={<r7=>0x0}, &(0x7f0000002140)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002180)={{{@in6=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000002280)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000022c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5, <r9=>r2}}, './file0\x00'})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000040)="d3556053ef0b80599a9c06f8ad84c3157e9b50fdb640cb61f61035a6cc9d280d5e5be7e136ea8a1a7e17ac7a9c1df71f71b20b30ea33a437841be518645220", 0x3f}, {&(0x7f00000015c0)="d5b86485023e3caf1d57c0ca20bbe8805b1c438de5bfdbd0c625ebcede5f6abc4615127e015c273af46b21f88ec93a4728d97aab7d15757762129aae0ae86023c525c1f163d24120d6d0da7a6805fdc72dbe11411812612f112868c02e0bdf5773947eabd7a0d52e38918a67a01d8be1a64d2dab1b824bc05c3a991f4f568940743008abad333f6b7fd67d190ee85ec84e91b88e673deeb1997c45451c534ab7c6426f0d2680a5ce612c9e165eae84c9a52956c423d48950de2aae91e23da9ac6b7e8d0c637689212cd2432fe4", 0xcd}, {&(0x7f0000000240)="b6f1aab278d420d4aab0b9e1659ca649370da96461435a845b79ec335a7a6b3f9338b653b7", 0x25}], 0x3, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x4000}}, {{&(0x7f0000001740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000500)="b9a58246472e7bd9eefb647803668da4564a809df2d2c24dcabb8c8e2e7290320a6e60f99a9cd570108ec5", 0x2b}, {&(0x7f00000017c0)="e039394a301f20e92fe72e6a3f8f2e0fe8c9d3d118ac6e58f6bfd8", 0x1b}, {&(0x7f0000001800)="82bbddfc6c159b1ffcf5f6b4f8590bb6529a8a6e03aedb3703914b3fbbccb4c08a6e6a252c5fd2948e911eba8d509ccaa4255858342847e9c8b2cde50f9a215f7f011dbccc52c3de636cbccce16c37924075eab3a9cb1f91f0a7feacb67b208e1c4fcea55edb3f7e0ca62b9719a412fdc31df8f469b989a39bebca040453fe7064a17f48ec06937f", 0x88}], 0x3, &(0x7f00000019c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x40, 0x40488c0}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001a80)="7a81c6f3015442fa111babbcc5943d05fc979847433e0301103353bd43ee1557395e2396f9695e2f0fcc9955e8625dfe7601b531d95830b50125bfd4c244a7d3cb31a00f8efd84df3fb118efa4b88a1dc12ce12cbb732a0b38dace2ab20fca79a03533a86d52131b4228e0f9bba55c1aea5f5ea55638f2ad4a6b8b6ffccad6c707e9cb99405daa1756", 0x89}, {&(0x7f0000001b40)="51939ee0c11aae713597aac12d2af707d16e5264b8dfcd565565152bdacccda0fc598bf0a97a5350a6a42b70feb933b4f03a38a5c6a0893a2c045686be1076a07636b6eb9f740fbe9e93faddf12e1591cf97bd1b0d3ef88de64dfa67e9638e8476898158b4bfe8af303e5a00f224c6177096b53b81229ccd8ff0c9e338a4c80003ecf7187892ee16f998", 0x8a}, {&(0x7f0000001c00)="e0c48be87f39c04b44c513203139687a1499e1629a3996f52b31e6e3c425eabd3e3e2987f2d1bef7119d8ba1eae6f6d60c41a00dfb8ed7f2eb1bd0f7bc67c46f6dc101b9788aa2ca3084d7ec936ed393bb95ab261e2565999d2a295c65ab1ed194c36b68bf533852edf1a9e51105a76dd5daf6952829a85c957ae953cead47e1fadc2ae285bbe6ca89cd7c564432cc21ad2b15c39ec115421b4c8a23", 0x9c}, {&(0x7f0000001cc0)="bd1a42b854a625ab81992252fc5c204bff1a0802594f167723d346b4d146a96884822e6e94dff03f8e3b60dac3a2e7f94e56cf94d9bc9d519a6da534b1f820ee80a88d3ce1fbe3a5c68dbe65ac", 0x4d}, {&(0x7f0000001d40)="bf26280e59ee8fd0e1a9dc4ea03e48414f711ce186731b74363ca1223a1aca089fd2f5f9575e1e4a2c57b2381e21e223222d6da40fb9db541e4a12e0166e05e2bbec58bec283a18892676729a86335482e12216debd2850859b9df1c2439b778df1a2a8795f77d873a6277c815ef947e06e778d99a3c765fc4bc332493bb94bbea6beaabcec5bdca39071eca0115c606cc2da99c3a3cfcf5dafda509e6d7aeecf9faea81e36da37d12abb688ef814f6aa7efd7dd258d17624a75c4b9dc375214769e13fe5db0c00f0bdf3f788bef096ab78a8a05cd2f171d60ee6c87117b5dff1f560c7f0233c0b15a3dad95716e641523465ea003", 0xf5}], 0x5, &(0x7f0000001ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x4000005}}, {{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f80)="d47bccccf949c622d0abf13245b81b4ef78d786de10fa35376bb1ccefe7b3b5e15c309fb7a88c171540080efbebafb0c8b3ea3ef2dab31d48bdeee9091673b66acef4f287708fc3867b1caaba96ee008960d3af678bdf64f", 0x58}, {&(0x7f0000002000)="e362a588ce59c1eda21f9350fc51659c2ff2e841f73c1e4161665653d3283813d9af94fa0d9a6aad129866d7e97df0f98203e9c37cafbe1dea43fa0472213237a2ab12596a8ac588eedd106564ee35d38c", 0x51}], 0x2, &(0x7f0000002300)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x4, 0x40040)
r10 = getpgid(0x0)
r11 = fork()
kcmp(r11, r10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x0, r1, r4, r5, 0xffffffffffffffff, 0xecb8d14be1ed53ea, 0x8001}, 0x0, 0x0, 0x80, 0x1, 0x8, 0x8001, 0x1f, 0x6, 0x8001, 0x6b, 0x0, r10})
r12 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r12, 0x0)
msgsnd(r12, &(0x7f0000000580)={0x0, "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"}, 0x1008, 0x0)

18:15:31 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:31 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000140)={0x0, "066b1f0f4025f792091f53fa0f3a0c21035d4b3c27502803000000d3804278ca86cd1a422dbcfba6d636fb7264ab6eb71d313b01a66bc86b3f8089f8da67054a72e6097075dcda64d75abc1c9d4497c85385146cb700bd5ab247b2bcb3530b3ea001bef9070e5218ceb78aa933c9d74aacd3910bcd2961b347284d34d84ddac47594f9f1e36cef39a68d627f29f2000000000000080000000000000000"}, 0xa5, 0x0)

18:15:31 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x33)
msgsnd(r1, &(0x7f0000000540)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/156}, 0xa4, 0x1, 0x1000)
msgrcv(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d673d87278c1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5f24f4be6e6ff68e368cb610066cd79bf16e1a57bd5a8c0b6551150b4e1254c5b389cd8be9384efc620f32c440b288b89e765ec565d904da1febfc0263e891ff87b"], 0x1008, 0x1, 0x0)
r2 = msgget(0x0, 0x0)
r3 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgrcv(r3, &(0x7f0000000200)={0x0, ""/166}, 0xae, 0x1, 0x800)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/92)
msgrcv(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000006584b306437fe45c6225f4d699363fbd6a0512b29a2569a8685c83900000000000000004d579ce938398c3a08ecd9d5714875bb0174d6020f1fd7cf05"], 0x6, 0x2, 0x1000)

[ 1892.910718] msdos: Bad value for 'codepage'
[ 1892.922082] msdos: Bad value for 'codepage'
18:15:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xffffff8c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:31 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 1893.065524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfffffff6, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:31 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/227)
r2 = msgget$private(0x0, 0x4a0)
msgctl$IPC_RMID(r2, 0x0)

18:15:31 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1893.130611] No source specified
[ 1893.139693] No source specified
18:15:31 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x9, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x7, 0x9, 0x7, 0x1b, 0x0, 0x1, 0x100, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbb8, 0x1, @perf_bp={&(0x7f00000001c0), 0xb}, 0x42004, 0x9, 0x664, 0xf, 0x1, 0x8, 0x66e5, 0x0, 0x4, 0x0, 0x80000001}, 0xffffffffffffffff, 0xb, r0, 0x1)
r2 = getpgid(0x0)
r3 = fork()
kcmp(r3, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x2, 0x7f, 0x0, 0x99, 0x0, 0x0, 0x80000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0xfffffffffffff801}, 0x10002, 0x2, 0x47, 0x7, 0x7, 0x2, 0x20, 0x0, 0x2, 0x0, 0xbdf8}, r3, 0xf, r1, 0xb)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x80, 0x0, 0x4, 0x0, 0x6, 0x10206, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8e06, 0x3, 0xffffffff, 0x0, 0x45, 0x9a5f, 0x7, 0x0, 0xfffffff7, 0x0, 0x80}, 0xffffffffffffffff, 0x7, r1, 0x2)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="1dc41448e2e54c410000"], 0xa)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r4, 0x0, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r5, 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0xfffffffc)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3ff)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f00000003c0)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_a, @broadcast, @random="238c44381787", {0x9, 0xeb}}, 0xc000, 0x3d, @default, @val={0x1, 0x2, [{0x5, 0x1}, {0x0, 0x1}]}, @val={0x2d, 0x1a, {0x20, 0x1, 0x1, 0x0, {0x9, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x1, 0x5}}, [{0xdd, 0x16, "618b26e492b1a4fb1eca453c0eeabc153b439c6de788"}, {0xdd, 0xc, "e3a6cf3fe5767b3591e311be"}, {0xdd, 0x3e, "0cb23164559e0a55b8d83026025bdea2046b833d60ea60ad4922256b47c76fc14cc8c7bb47d249600b76ad111b9e369fbf803cbb40bbf0b012c02e51e570"}, {0xdd, 0x41, "0973d26faca2e80f1fac542bd3cdc5082a9b05cdfa843f9f677ad8f271139681edd2ec35b8043124973cb70bab76d3263de8af08a6b6c68374d532337e9cb3ed10"}, {0xdd, 0x77, "9e548e633c1233e80ff5ce9bf5f55b3bbad652f716f88f95ebc506b215245990639ac397386bcde828a089abd42b15be5a35ef18380fa61b462cafcfea29eafb5f02f2b93daf63ff9ad6be5bc0f92692a45ae011e7310950370e7b51b090fe24ae220f6c4655d94cd9f3f52320179b4c36ba77a64b8676"}]}, 0x160)

18:15:31 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x2})

18:15:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xedc000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:31 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/227)
r2 = msgget$private(0x0, 0x4a0)
msgctl$IPC_RMID(r2, 0x0)

[ 1893.356923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.364809] msdos: Unknown parameter ''
18:15:31 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1893.385916] msdos: Unknown parameter ''
[ 1893.417346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.429470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:31 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:31 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/227)
r2 = msgget$private(0x0, 0x4a0)
msgctl$IPC_RMID(r2, 0x0)

18:15:31 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x3})

[ 1893.630655] msdos: Unknown parameter ''
[ 1893.637687] msdos: Unknown parameter ''
[ 1893.761847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.786810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:43 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:43 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/227)
msgget$private(0x0, 0x4a0)

18:15:43 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)

18:15:43 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x4})

18:15:43 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x3}, 0x16, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xb20}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x100000001)

18:15:43 executing program 1:
r0 = msgget$private(0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x1100)
r3 = gettid()
tgkill(0x0, r3, 0x80000000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r7, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r9 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000005b00), 0x2, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x5)
r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005bc0)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002180)=[{&(0x7f0000000340)={0x18, 0x35, 0x2, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x14ac, 0x0, 0x0, @pid=r3}]}, 0x18}, {&(0x7f0000000380)={0x1d8, 0x30, 0x20, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x6, 0x0, 0x0, @uid}, @nested={0x1bf, 0x28, 0x0, 0x1, [@typed={0xc, 0x8d, 0x0, 0x0, @u64=0x1f}, @typed={0x4, 0x7f}, @typed={0x8, 0x1a, 0x0, 0x0, @u32=0xffffef79}, @generic="b76a2f068884cdd84fca7fe49da985fb5dcdd08b26526bc0a73b67c80400afe3374f5ed9d924a617385dee925ba419336828c725fb3fd55ebf3399ddc3a62d3bc2f3324ae3018539b9a458ca04e0eea3b3265120a6857ca8f587d1531955a2f4f0b182450271253d148ddc6fd49bf943bd7aadd6a019c59620c616df7e32077fb9e96bdf6ced3014c331823efb5cf16d35545b3813ae2d4c6f572e4d279751f0af3c84341c4e076fe2db053303f027a9476235548205f537c951b8f50044e0a6ffc6", @generic="15e1118d08098200e7d2ef6b70c0b81811dbd85c9e135e6e05f2c40c8969620d26d1769644f627bb1faf212bc1b36b80f8e0058fbf46d135f65d937620e16c867b1bee0d6dfc467c0190a7bfe48c01b367a0e8cd1558759bfda7f2787642b1f4522f1e7987ac03cbc57be572a15342a8d07444a5702c0ef582d0234d32e79b4f20ba00bb649febe21406f202cf3ce0287cf5fcd0d772cc0743a052d7dfe3c3ea52f143cc03b0691151116d8f21980b20fbb56591af5a403bde58297f0f24fcd0a4c6", @typed={0x6, 0xde, 0x0, 0x0, @str='*\x00'}, @generic="e27bfc", @typed={0xc, 0x49, 0x0, 0x0, @u64=0x5493d60b}, @typed={0x8, 0x18, 0x0, 0x0, @fd}]}]}, 0x1d8}, {&(0x7f0000000740)={0x364, 0x41, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@generic="a86b0a155512997f34cbb469c03549bdeefa7230c612eec27f42b5e55511c152", @nested={0x6d, 0x88, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @uid}, @generic="3a35cdf3a11aa1462364d62db57414f9ecd9f257069ea2ee25b46a70bc85358210a4cb63cd8617be11b442d016b7e53c25e4a777588e8ea9f70ea7f775f8e4d936d9a2c3d964962dbe4ade58731576ce8d194ddc2765430b408f45c050d82754e8"]}, @generic="67b296641b76002ec46fb0d23b2a7bf0d29d0b20e504ea8c92f10fea15a48b985ce8369c526e865186eccc0ae2b673518dd94a51654be543a4902b5fa79951ad5bd8430a6febf86395a1ea33892b05de225920c5580d1c7fb7746359605c45748c212b37977ae5a5a8eb1030a343a50bb85fef8d3838b6785ff339e18540f5a7bfea93e1d15414dc0a015725736f26", @nested={0x1ba, 0xd, 0x0, 0x1, [@typed={0x4, 0xe}, @generic="edef577f33f67ea5110c0e9d930910d6c3fbcc5ffeffa21c263e2bac488321d42187e77ebeeeadbd77a51a99603972b0d025c9f43f628e328b54e6819761270897", @generic="1e9417645929af86a2eb430626e8f5c5e1953319c37719006041df45ef06f01ec16b86502a927dd1b734d359327d651bd02b6de8c8d92ee4e101989a483def6edc073eb98a1ff5b1357e46ee7aeef86128de99564ae7a106c27bd00cbc2574fb3b3cf3d339ae45f653afc503d2a1a104d6e4d01fbd209384243e7ce1138222e8b401b97a0ec7d610bf474dcec2ef41be10388f4415e76625c252145816448d61ef83dd7e498c2ad2393cd71b8a69c46a9f7e651e418e238896f802f6a55d59dc6757365356dd38d5b1cf7d4572b4024642b238338a671dcfefd93e301169ff5254f4ede32b10465cc78cce1406fce5b91abee94da79a1ed1a12d56", @generic="7b2fe2c26d3fac12a647bccd2e1ba9b2ca511f826b451acd3ea9737bde9a0dc58be3eb9500a3d648ac9c10050d4313761dae2f75ae5766e177baf69bdc4ab1c10b0f13ded3645ec1bd081abaa45c73acd31d2d27e5972c9f96c33f4fcb2216df3103a2b8235aa7220ff6ef2814d401fab5dbadd2a00e"]}, @generic="81002e", @generic="a2e104b524a8ad2575342992859f1a7fd1eb9e0be995195cfd8c5130853640cf975a8af590fa2b0ab6edb1bbf167f2e93a328e4d6941efc073237061478f48e6c4bf44bd2c5d0ddafdf9526353ebd2e5fe938fcdcd3b83e0c0c2ff208817bfbaa53140706b40df7dc229bbc4700711be3de7d6"]}, 0x364}, {&(0x7f0000000ac0)={0x104c, 0x18, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x103b, 0x93, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @uid=r6}, @generic="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", @generic="955f2bd167", @generic="105114d92d74c002333400bfed6d8645fcfc56bc2ef90847ce170df826e40bec40f0e106d6761a455848"]}]}, 0x104c}, {&(0x7f0000001b40)={0x2b8, 0x24, 0x104, 0x70bd2c, 0x25dfdbfd, "", [@generic="30a9c220df00c421b2bd65e7c8af9d3f488e06a4ea1ccc72e87c49fc4dc3527bada2943e5a2c9b1eef0f93ee4d364a2783d057a0c8b1c1f7efba98a8e238b530d3d41f3a52e1ee2752b5", @generic="792b20c716be2db252eeb7e81d5991d081d056bfce5d33027ddfe27853b21a98e8cb7db89005d7add1150015fce8f126dc8904159b6921c3ec4ee6607b63ed17f405d2d196aa8d9971570948191b5592ce155b38", @generic="88cb15a4d2ae8b8ce4a13a", @generic="5c2ae8684339df61f307280f97e6463127bb08d11247bfeffebdaceeb4db21f50169421b0cf5f3be7536df21c4d72f04c63e6389ee8bd6cc30a04915400f8e4fc7f4caad8bfa8ba51041655ae1a1f7a70b3b524d9d403e7f8c882883b3fb752dd390ab977510c49a07408ceed9e88767c53078f90e7fca9cad7061354f2119cc449fbc808a48456fa9466c697658050ac276e0e54fe9a58f18a6e89038624c0a0cdf5a28b86708b77f7e500b93fb366592d5c9113966a4f90752bcdd7638666f18ab438893d983a350d87b8bdc2bc0ca199b1b538b297575", @typed={0x8, 0x85, 0x0, 0x0, @fd}, @typed={0xc, 0x88, 0x0, 0x0, @u64=0x4}, @typed={0xc6, 0x7, 0x0, 0x0, @binary="4ce091bb434c945e5ea21db0742a97c0cc574715465137d1c1c8cc8929d85c6181263b52b66ebace6c680d6f864d5c2eab05d18425da702a6f351a5fc2a56d37a8a6f4817dcfe0befe810b88c13f0d1b633066446fb712a53447c0a713e76692bc374b3fd77daad8ecab2df4b370d517e3d3559ee7db690b0f2bece01e496a246e9e482ded4adb893c097cf1958321e2edf655150e5824dbfbad73d7dfa782e917929e0ec6b260fc176be14cdc4b7ae30e1eaf0ef8c08a001f66f71846bc8e2f220f"}, @generic="a84630abbbd6d138408db6bce40fb481f920c85957e8d883395a5a67f7af46a009ac67f04112ddd3ce26f5cae64a5a16cc816c675d8a39427f56cfab83b990349a9f0f0f4d6d26b2dd"]}, 0x2b8}, {&(0x7f0000001e40)={0x20, 0x10, 0x800, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x92, 0x0, 0x0, @fd}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x67}]}, 0x20}, {&(0x7f00000026c0)={0x1058, 0x32, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0x20, 0x4a, 0x0, 0x1, [@generic="6fcec96c3182ee06fedc1cf38fe725b02cf91167363907059681c782"]}, @typed={0x8, 0x92, 0x0, 0x0, @pid}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @pid=r5}]}, @generic="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", @typed={0x8, 0x88, 0x0, 0x0, @fd}, @typed={0xc, 0x7c, 0x0, 0x0, @u64}]}, 0x1058}, {&(0x7f0000001e80)={0x204, 0x31, 0x2, 0x70bd2a, 0x25dfdbff, "", [@nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @pid=r5}]}, @generic="49b084ff248ed53124ed24d9b1afbed16dc47cb87be0f3eb120f1766ccb056623c5b07b027535d76ed48092f7ae71a948e4b54e07fabda5b95aec7dc51308dc86ecaab4da0200b4b10190bda63b9bd47d300679e5217e918abeaf3e26d18a6f3eb6ac5483dcb0d8738c153cbb43f917cadcdcd8c5df6d5a634185872ef7986c36592b572cd92f7ccc48b0710bb5ee83b1bfc8b10f12b96144f82010d1b04b98563e19e", @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x136, 0x49, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @u32=0x400}, @generic="2a7a19267e011623357c57ef49bfbd9aab746199508c9aa4be74c6f7c49e5436b6e817fd088846aea1e5054444a1c31c80235fe56768e0a9b49d9a1c13fe60749dd89fe3345a6a8f9431b01e7d04e7d5082511660b64cf1fb4c08908e9e613ebfef878b5bfadc1501510f07f072ceaffbf6fae05f4d88936bdfb0a83934e2c94c3d39bbeff8164f238bc8c433b9bd028301925ed323b838cefa057cdbe16996889bd468fe6eb169de5bcdaa11308291d1aef83dec07676ee10d1ecff17b1d83d0f175119c3f13c40dcd0b20aa18522100a2cd4d9acf77c69c215", @typed={0x5, 0x13, 0x0, 0x0, @str='\x00'}, @generic="3387dc56da65cc7904a2da171da947474ec1f12f16a54ec146", @generic="544ed8ac0dac2dfedeb636b60be52d4ac0578dd814e4b4fb9a1bd4e1c0a57939698288eb9c3e2f1a9f7ca0d04232bd"]}, @typed={0x4, 0x1a}]}, 0x204}, {&(0x7f00000020c0)=ANY=[@ANYBLOB="9c000000180000082abd7000ffdbdf2514002f00200100000000000000004000000000028bc0bf568b2d19caa4ea9bffc99e16c697223abbbc1f9859c47319b89d854a7dd0ef286ef1376d3626ade04097e6d5439577df939fc8aa2b3403e218008a800c005a00010000000000000008006500000000000f0060002e292a2340242e2a7d34000014005b00fe80000000000000000000000000003600"], 0x9c}], 0x9, &(0x7f0000005b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x20, 0x1, 0x1, [r8, r9, r10, r11]}}], 0x58, 0x24084051}, 0x800)
r12 = getpgid(0x0)
r13 = fork()
kcmp(r13, r12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
getgroups(0x2, &(0x7f0000000140)=[<r14=>r2, r7])
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, r1, r14, 0xffffffffffffffff, r7, 0x4, 0x1}, 0x0, 0x0, 0x3, 0x8, 0x3, 0x1f, 0x0, 0x4, 0x9, 0x7f, r12, 0xffffffffffffffff})
msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000006848d7fc28265b4e2ffee3799868af2426abec0efc83485ce573dc94cbfac55f0d2756aaeaf8fe02d0faaab45d2ad329ae304a6fca0612513836d2f978711229b9f2b14f290a69a6b681fe5f6b1ba9b6cccbc34a103bc183710a8556bb491e64e324aec688631f19855dd9948b3700c2e821e467fe1d828680543f666870c24607bf00"/152], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:15:43 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 1904.850123] msdos: Unknown parameter ''
[ 1904.856283] msdos: Unknown parameter ''
[ 1904.871119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:43 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/227)

18:15:43 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x5})

18:15:43 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:43 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1905.081265] msdos: Unknown parameter ''
[ 1905.089938] msdos: Unknown parameter ''
[ 1905.210928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:52 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

18:15:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x8})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
dup3(r1, r2, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0xc3a}, @device_a, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x8, {0x0, 0x3}, "e25d2a361dcde8c4"}, {0x0, 0x2, {0xd, 0x4}, "c8eea7eac2a497e9"}, {0x0, 0x0, {0x6, 0x9}, "77b40a9c7e8d4f98"}], {0x0, 0x1, {0x1, 0x3}, "66e8c417627f6932"}}}, 0x42)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@rts={{}, {0x464f}, @broadcast, @device_b}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x8, 0x30, 0x8, 0x0, 0x0, 0x80000000, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x8001, 0x9}, 0x92cb, 0x3b2, 0x9, 0xa, 0x5afc, 0x7ff, 0x9, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, r0, 0x9)

18:15:52 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:52 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:15:52 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/250}, 0x102, 0x3, 0x3800)
msgsnd(r0, &(0x7f0000000280)={0x1, "429bb342e7bd76fb673839cd40c5223cb03a0339b572e163496d29472f83d63d81f737c7c139106205a20b9517d88655d8f0b9f39d042064c7310ca75dbb29d5683a1c84b428dad7621275933df1335143256b0f8a84"}, 0x5e, 0x0)
r1 = msgget(0x0, 0x304)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/32}, 0x28, 0x2, 0x0)

18:15:52 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x100000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:52 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x6})

18:15:52 executing program 1:
prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040))
r0 = msgget$private(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r1=>0xee01}}, './file0\x00'})
statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4000, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setresuid(0x0, r3, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=<r4=>0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x1, r1, r2, r3, 0xee01, 0x12a, 0xfe3c}, 0x0, 0x0, 0x6, 0x8, 0x6, 0x7, 0x7ff, 0x9, 0xdc8, 0x1f, r4, 0xffffffffffffffff})
msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="fdff1500480f601d"], 0x8, 0x0)
prlimit64(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x96, 0x1}, &(0x7f00000000c0))

[ 1914.270514] msdos: Unknown parameter ''
[ 1914.278491] msdos: Unknown parameter ''
18:15:52 executing program 1:
r0 = msgget$private(0x0, 0x500)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0xfffffffffffffffa, 0x800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x1800)

18:15:52 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x200000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1914.301308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1914.318239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1914.345544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:52 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)
msgget(0x0, 0x0)

18:15:52 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x7})

18:15:52 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x300, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:52 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/166)
msgget(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3800)
r1 = msgget(0x2, 0x143)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000200)=<r2=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setresuid(0x0, r3, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getpgid(0x0)
r6 = fork()
kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, r2, 0xffffffffffffffff, r3, r4, 0x0, 0x100}, 0x0, 0x0, 0x8, 0xfffffffffffffbff, 0x101, 0x8, 0x4, 0x5, 0x8, 0x1, 0x0, r6})

18:15:52 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x300000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1914.458722] msdos: Unknown parameter ''
[ 1914.466232] msdos: Unknown parameter ''
18:15:52 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x700, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:15:52 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x700000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1914.677205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1914.682589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:15:52 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x8})

18:15:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @device_a, @random="e39d41c30f78", {0xb, 0x5}}, @tdls_setup_cfm={0xc, 0x2, {0x2d, 0x80}}}, 0x1d)

18:15:52 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000580)={0x0, ""/4096}, 0x1008, 0x1, 0x1800)

[ 1914.768359] msdos: Unknown parameter ''
[ 1914.774373] msdos: Unknown parameter ''
[ 1914.786454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1914.791223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1915.111143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:01 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:16:01 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x800000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:01 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x810, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:01 executing program 1:
r0 = msgget$private(0x0, 0x10)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x0, "5d27b769a7b670b5ef0bbfbef5d62b0ac02fbbcf48f65e89906ca661e4b3044ddfcd4fa249ce043eb9baadb57c224f97cb9067bd8a07a79aa64b1d4ba8e49b232f7fc0cfe5e9dfd8a8747d"}, 0x53, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:16:01 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x3, "bbda1635d5b0fe2eb342e1ce6a6bedc62e51a3f08ea2ae194f2a1d29560e8da8dce0c48b1bba34afcb49bd19dce8f43cb3d0f7938dba83a25166502d20c9d12c12ca5d026bd1e36ee420c965ee1d89c8b8fa2cf2d3522b1966123fd4482010a831d319461c20d766a81164d2f208b85d6e133014dfe7ddda34c2a148911d92805b5a21a38f7db32e1f2a0baf6007d7d4a38c7231ba775e38594545a8994a"}, 0xa6, 0x0)

18:16:01 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x9})

18:16:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:16:01 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f0000000000)={0x1, "f3023a933a354d396716752c4bbabcb5"}, 0x18, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 1923.434062] msdos: Unknown parameter '	'
[ 1923.441356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1923.449790] msdos: Unknown parameter '	'
18:16:01 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x900, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:01 executing program 1:
r0 = msgget$private(0x0, 0x202ca5517129a882)
msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000200000000"], 0x8, 0x0)
r1 = msgget(0x2, 0x0)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000000011b7841a2c73aa3e973ac099f3444e5046d4ab0626ad777a84477a39459bf08935c4d5df07545b8183b50f92d91ad18a2bdbdd48a6daabb69207a2a2e648c52d80f90d45ced099d873e13d575c867f487370ae761c3141034bd84fcc94bae1dcb6088da3c522c2eba7871fbb981b432548a68021f78e9ef9a0fd00"], 0x83, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x3, 0x0)
msgsnd(r2, &(0x7f0000000300)={0x3, "6e5b5435559ee894bf3c4bdf2b9083e908c0acd76716662b78b0485f372126327fc6299ab09c862a2520d4825d7c663f1b4dcea62ef005d44d82c201fc8233a930b6fee65d9151fb808e61c3ddcc63080ef13f1132f9f00a0226571aba523bceae445ca96a922154d37e0a22389c62e17bd5e5ee4dc80ac835018b1f487073dca35ed863fba3fde90efb2dd700204404b0f2274e9b021b2d642fdef9ca6a7d2b600348c973e2f6e6e930d6d75d4dc7c9fdff9f7a88ad12541f762bb7222ae094249357b3db7dfbae79eb2a5b8726209473d3920bbe58"}, 0xde, 0x800)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/231)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/62)

18:16:01 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x810000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:01 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:01 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000140)=""/144)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:16:01 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0xa})

18:16:01 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa00, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1923.630066] msdos: Unknown parameter '
[ 1923.630066] '
[ 1923.635515] msdos: Unknown parameter '
[ 1923.635515] '
18:16:01 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/2)
r2 = msgget$private(0x0, 0xa)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000200)=""/24)
msgctl$IPC_RMID(r2, 0x0)
r3 = msgget$private(0x0, 0x0)
msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0xc7, 0x800)
r4 = msgget$private(0x0, 0x10)
msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000380)=""/201)
msgsnd(r0, &(0x7f0000000300)={0x0, "fca96406aec45d80c41eb501d0fc1faba9e89e2d8a9ba3c88a95d88b189815fc43061782fc78ff85868ee4638d78aa8c1336ea9b57d3978512006664997973126b462da404fd98b1de"}, 0x51, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/144}, 0x98, 0x3, 0x2000)
msgrcv(0xffffffffffffffff, &(0x7f0000000140)={0x0, ""/183}, 0xbf, 0x1, 0x1800)

18:16:12 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:16:12 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:12 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ca03b98a016bd9fb611c8ceb3f7c84980726189f3d142f08308d7ec345090bac421cacd02a489ec1039bad260b2369b0c30622ea32233d1ae1906e1fa"], 0xa1, 0x3, 0x3000)

18:16:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3f}, @device_a, @broadcast, @from_mac, {0x7, 0xde2}}, @ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x100, 0xfff7, @device_b, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1b, 0x1}, {0x4}, {0x5}]}, @void, [{0xdd, 0x4e, "c4288a59b6b4220e980c7e2d5fb769ee2fd1d39cd33136d6ffc0d6f65ee3464fcd53136d00cf3d0b64e12ab9487a30f02d45d48d432d8488a62d594f2b8c631a0ebd06d958e9887d777b6def8511"}, {0xdd, 0x22, "5f7a27f48c5075a84a23741a5aad29772e6b74a03df2c134e11f59d0759c34a8b3c1"}, {0xdd, 0x92, "c18604f65d0a295965204a6483247b3467756707ab26a77402ac2f3703de61dbb470014cfc4e22c4921066f5078c8916b1abf801d0a6dfefd476497c6e7a87e678c15e79781dc0f2a73fb65d19611db558db7a1c28476e7f598de19550e322ca95711f6938b3eb93d6a98def0a84810df61a55674746280032dab60ce5ed034e86fda8cf76e39e90457ecc8531bbd98a7262"}]}, 0x13b)

18:16:12 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb00, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:12 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x900000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:12 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x86, 0x2, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:16:12 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0xb})

18:16:12 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1008, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1934.632102] msdos: Unknown parameter ''
18:16:12 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1020, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1934.638361] msdos: Unknown parameter ''
[ 1934.641220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1934.652526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:12 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000200)={0x0, "6eeb897dddded21b3a9715b49e905e054584ba1193e9890560dddf6db9e6828df51a296d3f38b7146703626569286adc97d3b0693991165302d5b2ce8db43ed448842fbad6ded4da14ff22d1ad70b2537ace68a7b07326e566e7d067a9612fabc31aead2d0d62de418fdc2b00c29b2202a0a9686be671008b30e5eddcfdd256d761b39315899cda5e063"}, 0x92, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000380)=""/228)
msgrcv(r0, &(0x7f00000002c0)={0x0, ""/155}, 0xa3, 0x3, 0x3000)
r2 = msgget(0x2, 0x3a8)
msgrcv(r2, &(0x7f0000000000)={0x0, ""/132}, 0x8c, 0x3, 0x0)

18:16:12 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:12 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [], 0x10})

[ 1934.778727] msdos: Unknown parameter ''
[ 1934.784447] msdos: Unknown parameter ''
[ 1934.983595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:23 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000140)={0x1, "0960bab5bb90b6116138a300f8b07ba57758cec1b201bcd5adc905445938903d791051c1f3113afadb4c12c015ead46dfcbfef04edfb87f5340f2caf9739cfc179ace3f42eb15974ee037e3b1fc3c89c7bf5a8ff3fd07b9b7eedc2fda231bec84d2f1cace44fbbd91e2aaf34646a952661a50b1dcc15c4590c8b1a2948aca263e49605e1d27c"}, 0x8e, 0x800)
msgget(0x0, 0x484)

18:16:23 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:16:23 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:23 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:23 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:23 executing program 6:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
read$ptp(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xa90, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_BEACON_TAIL={0x168, 0xf, [@mic={0x8c, 0x18, {0xb54, "99d4698692a8", @long="bd79bfcb40755dc9e12ef7aa73128ed3"}}, @channel_switch={0x25, 0x3, {0x1, 0x0, 0x7}}, @ibss={0x6, 0x2, 0x7}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x0, 0x0, {0xffffffff00000001, 0x9, 0x0, 0x3f, 0x0, 0x1}, 0x300, 0x317f, 0x1}}, @tim={0x5, 0xe9, {0x6, 0x37, 0x2, "27b3c2bb53afbced8953d4880e7e17be0b53dec5211aaca8c00013134def93c2414325dd1e68fc7dd268966cc7f8fb03e3be621cca48af458d02cf5e95b189cae2d58b74a5bd163311382c97def07daa41112c1c587a4aa9bb091a50d26e764b08c0989c8d376ebc9868d28b0094f27bd987a11360c9fff511941b4bb207a645303391556771ad33d045d7de96935a590a8e4735e96edd95ed590b9341df059696317113aac27ff43b8c0513920372430aa09e8173470d31f843d4e8b2a7633430528d4dc58dba397773e6efb18d6c230f35a7b7c0923dac546cf684ce06678031f5857674f9"}}, @supported_rates={0x1, 0x8, [{0x36, 0x1}, {0x2, 0x1}, {0x6c}, {0x1}, {0x6c}, {0x30}, {0x6, 0x1}, {0x4}]}, @mic={0x8c, 0x18, {0x3b, "b39152312c81", @long="2c4650d3f95f2f0566ecab251fe928ef"}}, @ibss={0x6, 0x2, 0x3}, @mic={0x8c, 0x10, {0x16b, "8ff1063353cf", @short='\x00\x00\b\x00'}}]}, @NL80211_ATTR_BEACON_HEAD={0xc2, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac, {0x0, 0x20}}, @ver_80211n={0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x81, @random=0x5, 0x8000, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1, 0x3, 0x0, 0x0, {0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x801, 0x20, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xff, 0x61}}, @void, [{0xdd, 0x20, "5b40ba373588de935f9ede8c44d47a4be43a4421e7d10b7f1873fda734b1ec87"}, {0xdd, 0x17, "a538a5ef1aac6921d863e4f38b7161ceb4fa07e6eba620"}, {0xdd, 0x7, "0f41318e1c4c9c"}, {0xdd, 0x20, "f377b41836d58509bfbfb232d6d793cdc786a3feff5b258a54742b115f8bf21f"}]}}, @NL80211_ATTR_PROBE_RESP={0x42, 0x91, "54679decad6d7539147fa64946376fa487e524c3f41daed7d4733e40b206ef31d124e6c070c586d47af0175649a91f32c0a8e576d765db0a4d8146e9b29f"}, @NL80211_ATTR_PROBE_RESP={0x76a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x8a, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="ec4440bcbcd5", {0x0, 0x1f}}, 0xc763, @default, 0x8004, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x36, 0x1}, {0x3, 0x1}, {0x12}, {0x3}]}, @void, @void, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x1, 0x88, 0x5}}, @void, @val={0x3c, 0x4, {0x1, 0x5, 0xb7, 0x4}}, @val={0x2d, 0x1a, {0xc, 0x3, 0x1, 0x0, {0x3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x8, 0x1}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xc1, 0x1, 0x3a, 0x1ff}}, [{0xdd, 0x17, "9cafd5ce648c14f275318d58058e3494482a72aeab4750"}]}}]}, 0xa90}, 0x1, 0x0, 0x0, 0x8004}, 0x40004)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x26280, 0x0)

18:16:23 executing program 5:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16], 0x2f)

18:16:23 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgget(0x0, 0x20)

[ 1944.901288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1944.905077] No source specified
[ 1944.907529] No source specified
18:16:23 executing program 6:
r0 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x180000)

[ 1944.970494] No source specified
18:16:23 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2010, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1944.972727] No source specified
18:16:23 executing program 6:
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:16:23 executing program 1:
r0 = msgget$private(0x0, 0xa0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015ec949aab33fd0f44bf58ca0b1aa1e600000000000000000000000000000000000000007400"/161], 0xa1, 0x3, 0x3000)
r1 = msgget$private(0x0, 0x108)
msgsnd(r1, &(0x7f0000000000)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000140)={0x3, "1c050296c854a91ccfae0203f10bc896cc42a504cd514eb3dba7f8e59ec3f58fec839606b7c11240d27d32ceca7e1f4682e67c4a247704c26a15804a37070c44ae9f13a37b4fa41cd392288eb56f27fc181ea97d245436fa9aed459d0b5156b589f0d8fce2866aa2181616bda3c084abadde391359d4b593a1fd3dad8bf72ac88ceb74c74f633b921e034a6300b0a1067688e3decfccbd6d22a28c1d11761f8295c6266e3b25ccebf68923efa471c726024187234c26502fa96986c84ee6d71049f42457a8eb0971776d6e764a460d02e17a443f698965d3a56a1acc"}, 0xe4, 0x800)

[ 1945.052295] No source specified
[ 1945.208540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1953.164067] Bluetooth: hci6: command 0x0406 tx timeout
18:16:32 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:32 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:16:32 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)

18:16:32 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000140)=""/201)
msgrcv(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000f008110010000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000030a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000f4ffffff000017000000000000a949987b00"/164], 0xa1, 0x3, 0x3000)

18:16:32 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f00000003c0))
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x276, 0x0, 0x80, 0x7}, {0xf5f, 0x1, 0x2, 0x5}, {0xc7, 0x2, 0x9, 0x21}, {0x0, 0x0, 0x8, 0x10000}, {0x5, 0x1, 0x0, 0x5}]}, 0x10)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0)
r3 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgsnd(r3, &(0x7f0000000140)={0x0, "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"}, 0x134, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00')

18:16:32 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:32 executing program 6:
r0 = io_uring_setup(0x25bc, &(0x7f0000000000)={0x0, 0x3e2e, 0x0, 0x1})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0)
syz_io_uring_setup(0x3581, &(0x7f0000000380)={0x0, 0x319c, 0x2, 0x0, 0x5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440))
io_uring_setup(0x6b54, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x3e1})
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x5000, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@mmap}, {@cache_loose}, {@version_u}, {@posixacl}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x7}}, {@access_any}], [{@appraise_type}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}})

[ 1954.447312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:32 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xedc0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1954.479534] No source specified
18:16:32 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 1954.532590] No source specified
18:16:32 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:32 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:32 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 1954.794281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfffe, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000a8c18339c15c1d599c23f4d39fab920192a332441afe7c17d929d48f37d48711a772fc"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:16:42 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000200)={0x1, "5c5f806ed7cc732f50868c6cbc41108a6108f60232e390eff6c09aa145546f678fdb234398318cc606477d0a15ef717e7fb183ec6a854daf9a2f0a4a8e1eac8c9eff0dab433af60e6df39059bdfdabf3ea6ce538882c567963dc09f545680952d371d895cfc7f4271411fe7f3617ca5ee12a266e2ad87e3ae1a993c0189fea3cea9336fa27000000ee4ee4237686c89aea64139470fa3a5d667df6"}, 0xa3, 0x0)

18:16:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2010000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:16:42 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0xfe, 0x5, 0x1, 0x0, 0x1ff, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6e, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x9184, 0x2, 0x0, 0x0, 0x7, 0x5, 0x7f, 0x0, 0x7, 0x0, 0x401}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)

18:16:42 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
setresuid(0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setresuid(0x0, r0, 0x0)
r1 = gettid()
tgkill(0x0, r1, 0x80000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r1, 0x6})
r2 = gettid()
tgkill(0x0, r2, 0x80000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
r5 = gettid()
tgkill(0x0, r5, 0x80000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r7, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r5, 0x6})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000200002000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040004000000000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0xee01, @ANYBLOB="10000200000000002000010000000000"], 0x74, 0x1)

18:16:42 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

[ 1963.977976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1963.980757] No source specified
18:16:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/158}, 0xa6, 0x2, 0x3000)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/32}, 0x28, 0x1, 0x1000)

18:16:42 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x39e7c3f2dd8648bd)
msgrcv(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000f047308b81f4e3473771598f9a00"/138], 0x8a, 0x2, 0x1800)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:16:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x40000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 6:
r0 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)={0x2, 0x0, @auto=[0x24, 0x11, 0x28, 0x29]}, 0xc, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r0, 0x18, 0x29}, 0x0, &(0x7f0000000140)="cd2b14d48ba23f794fd37f3b55cd1216163ccdace8b8b9f0", &(0x7f00000001c0)=""/41)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x7ff, 0x0, 0x0, 0x1201010, &(0x7f0000000000)=ANY=[@ANYRES32])
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000200))

18:16:42 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8cffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x451)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/139}, 0x93, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:16:42 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x80000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:16:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1964.316491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeff000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:42 executing program 6:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x103)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x401, 0x5, &(0x7f0000001340)=[{&(0x7f00000000c0)="287b13114451e796657a649c22bc8e09abc2dc4be288cff4457f5e68a50b2b8ab04bde8564f1abcae0cdd1a1d20af2cc1a42e9970f2672a3bab9135708a7074ea098ee19488a44dab2b340ac1c6cf0b5dd9d14a1133954349c9347002ad405719306500a5ac4df8c695132eabaac9423a3af300f4b6daacde35586412544c3b821a199af0e39528c1fd2ab3fc1f57f7e94d9f217b94696ddc796ded9c89a28330352f1", 0xa3, 0x6}, {&(0x7f0000000180), 0x0, 0x4}, {&(0x7f00000001c0)="951a6d539c54fcb5432e725b69a51f400d23f33c8b949a31c008c0de306dfcbe002cc9c34041296a05a1c26d73deb946cbb77b9dbe871de174c5bce3be5f9a08bdb93f2984019157b0cb", 0x4a, 0x7}, {&(0x7f0000000240)="affde8e337364c868837d0c9d55be93927f8d8a5bb63d1cd4fabeb64eb85943807a08946a724e46f736126091a883f736b5cb7f1ce207ff257f0ef83350e0cdc499b46c54f09ba5c8ab8e34a333dda41d55b54273dd018da154316324494b8a1245f6c32c95e5dd8f89ba2d12187fb9c91b6473b7e6c173264c8a4c96bbf78fbdd3ea0be718c54f0ca57a9ae83ca40258299a878e5b872956a95fd17974f2ac62d986e34a4e364ed74446d0b8623aca307892aa2c5c157c9ad05793b6e85011b357f99c685", 0xc5, 0x8}, {&(0x7f0000000340)="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", 0x1000, 0xfff}], 0x140000, &(0x7f00000013c0)={[{@rodir}, {@shortname_mixed}, {@uni_xlate}, {@numtail}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x63, 0x38, 0x36, 0x35, 0x61, 0xe, 0x39], 0x2d, [0x31, 0x66, 0x38, 0x32], 0x2d, [0x61, 0x64, 0x30, 0x5b], 0x2d, [0x33, 0x64, 0x39, 0x64], 0x2d, [0x31, 0x31, 0x32, 0x30, 0x63, 0x65, 0x63, 0x65]}}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '&.[!'}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}]})

18:16:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @initial, @broadcast, {0x4, 0x7}}, {0x4, 0x1, 0x3, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @random="6ae7e72b0ece", @random="11a579bddfc3", {0x3, 0x1f}}, {0x5, 0x0, 0x0, 0x1, 0x3}}}, @ver_80211n={0x0, 0x1f, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}, 0x38)

18:16:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1964.407734] loop6: detected capacity change from 0 to 15
[ 1964.413810] loop6: detected capacity change from 0 to 15
[ 1964.454196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1964.468865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1964.797407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1964.801319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:51 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/27, 0x1b}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r2=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x12100)
getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=<r3=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setresuid(0x0, r5, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x1100)
setresuid(0x0, r6, 0x0)
clock_gettime(0x0, &(0x7f0000005280)={<r7=>0x0, <r8=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005140)=[{{&(0x7f0000000980), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f0000000ac0)=""/58, 0x3a}, {&(0x7f0000000b00)=""/212, 0xd4}], 0x3, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000d00)=""/56, 0x38}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/234, 0xea}, {&(0x7f0000000e80)=""/171, 0xab}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/71, 0x47}, {&(0x7f0000002080)=""/80, 0x50}, {&(0x7f0000002100)=""/160, 0xa0}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f0000002380)=""/180, 0xb4}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/34, 0x22}, {&(0x7f0000003480)=""/208, 0xd0}, {&(0x7f0000003580)=""/22, 0x16}, {&(0x7f00000035c0)=""/24, 0x18}, {&(0x7f0000003600)=""/1, 0x1}, {&(0x7f0000003640)}, {&(0x7f0000003680)=""/37, 0x25}, {&(0x7f00000036c0)=""/157, 0x9d}], 0xa, &(0x7f0000003840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r9=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003a00)=""/107, 0x6b}, {&(0x7f0000003a80)=""/24, 0x18}, {&(0x7f0000003ac0)=""/147, 0x93}, {&(0x7f0000003b80)=""/251, 0xfb}, {&(0x7f0000003c80)=""/191, 0xbf}], 0x5, &(0x7f0000003dc0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003e80), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/224, 0xe0}, {&(0x7f0000005000)=""/155, 0x9b}], 0x3, &(0x7f0000005100)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x1, &(0x7f00000052c0)={r7, r8+10000000})
getgroups(0x1, &(0x7f0000005300)=[<r10=>0xee01])
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000005340)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x4, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x6, r2}, {0x2, 0x7, 0xee00}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0x5}, {0x2, 0x2, r6}], {0x4, 0x1}, [{0x8, 0x1, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x1}, {0x8, 0x6, r10}], {0x10, 0x3}, {0x20, 0x6}}, 0x94, 0x2)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

18:16:51 executing program 4:
r0 = msgget$private(0x0, 0x600)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:16:51 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:16:51 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xffff000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:51 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x3000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:51 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:16:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r1=>0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x6, 0x1, 0x7f, 0x0, 0x7, 0x90024, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x4}, 0x0, 0x6a29, 0xfffffff9, 0x9, 0x40, 0x159a4ff1, 0xb1, 0x0, 0x80000000, 0x0, 0x9}, r1, 0x8, r0, 0x2)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:16:51 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="01100001c2beaafd"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/161], 0xa1, 0x3, 0x3000)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000001580)=""/186, 0xba}, {&(0x7f0000001640)=""/184, 0xb8}, {&(0x7f0000001700)=""/71, 0x47}, {&(0x7f0000001a00)=""/68, 0x44}], 0x8, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x120)
r5 = getpgid(0x0)
r6 = fork()
kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r7 = gettid()
msgctl$IPC_SET(r0, 0x1, &(0x7f0000001980)={{0x0, r1, r2, r3, r4, 0xab, 0x5}, 0x0, 0x0, 0x401, 0x6, 0x5c, 0x9, 0x9, 0x0, 0x4, 0xb76, r5, r7})

[ 1973.329744] No source specified
[ 1973.381310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:16:51 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x7000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:16:51 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
r2 = msgget(0x1, 0x8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setresuid(0x0, r3, 0x0)
r4 = getgid()
r5 = getpgid(0x0)
r6 = fork()
kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r7 = getpgid(0x0)
r8 = fork()
kcmp(r8, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
setpgid(0x0, r8)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000080)={{0x0, r3, r4, 0xee01, 0x0, 0xa4, 0x7}, 0x0, 0x0, 0x7f, 0x9, 0x5, 0x1, 0x9, 0x3, 0x4, 0x3ff, r5, r8})
msgctl$IPC_RMID(0x0, 0x0)
read$ptp(r1, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES64=r1], 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:16:51 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1973.526144] kernel write not supported for file [eventfd] (pid: 20510 comm: kworker/1:2)
18:17:02 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:02 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:17:02 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x3, 0x40)
msgsnd(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="c20e6592f12f6aa5"], 0x8, 0x0)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/15}, 0x17, 0x3, 0x1800)
r2 = msgget$private(0x0, 0x401)
msgrcv(r2, &(0x7f0000000580)={0x0, ""/4096}, 0x1008, 0x3, 0x800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:17:02 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:17:02 executing program 6:
llistxattr(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)=""/20, 0x14)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000000040)={0x147c, 0x14, 0x300, 0x70bd27, 0x25dfdbfd, {0x27, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "dd894a1ff66e76a1ca11c1033169566114d29d56c26999c5d03258ece7f9bf4136769b09aa7ff979ab2e9ddbe4aaa74e3394159a550549db4bba11d12d4559f4395e2d22aa64355031d56b0c441936759cdcac53f7b8a212e0d3d62154bb25f8e985005b1eb07afcb6641d105cdc04ec63f802479811aacf24ada5ca11b8b9d36b035c95d8e0d2acc34603110f3ce2abf9ffd9ef"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "7251f52b6bb0079a4d235adcc7091d7f6d1cb2a2186094b1c97ea9c2f657c8307e1c34fe9e9045339d1cb0121ec58d7a52e12be17d825addebd1c15a65202f31243d65b4fc897b50dd74ffac3b19da4c257262dc8e8e1a6a5efb3a93c4fb251bf6"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "ccd90ef9c7bb56363088119c4e57aa2a85ced64cb376b3140a50485a2524d24dc8cbe1745b74277da8f4cbfd5ec272fd44eb1feee60866e9d61bf997332b96ed65fcd8545577835af98eb52ed9eebf2a814160e21c145c8a6a1d303733a6213f0e88a71897b7351169e31ed9450cf0c3890ceee1770056cf57101d645ad37ca18edf38caa5342386f51388e0242fd120a80502597d8848d129fea02b1cf2b3ac6c001c22c7405dab91fabfcda0d2110c726e813cbb195b74af7a064171ec4a9dece7b57477c1825a6872a7cc94d40efaf488e418dff332"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "4c20a33ae5d1f2b2620c5504cecb949bfd33a19cd0d6e0d3c96317279dc85a0673b4795bc95c8e22de47123c68e861f86beed20ee9c185ecbea08eecea89496b0b7a80df20084f6f0aba9acf7d4dfe07798302a71bc61cc7d2f24dff97145d6a2c01866352df52be89b7329d1f57ebe2ea6f2b05d4f88c8e73c2d05c55"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "2e817d755ea65143f49d6c4b631bf011c8c26f631a6050a9100a47d4ac64f8eececde0dcddb48c81b29873387b2755e56a34552e5cbce4822c74c2aeb7cb7adbc5607b58e5cdf2e257cbdc7cc461b5b2c479035baff69aacdcf55e28710d71b001cf0b0f1ed7b97bd8ea0d0b27a1d6a3e234fa7538fcc40b5ad5992582995fb9043647dd0ffbe6cf8ada865b6afda539b316ad5957eca68b24fd94433cec3be4d7fdd3ef"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "406726f2216bc78b47344bf4de09b7bcb236554c01fddfa4aabfdecfb0ac470cba54bb59287ca020bc4aa6c11d15d404133f2fb682157668f07ade8491ae0a16119834193306d1f380e1314319d18078d51eda300680ddb35a970687d9375cf618d1beffeb34969bd3872c0008684baf4f04994338574c22acffbd2fb6408073741ed2200983af40eacfe9263ee8853d80dff81ebcf707b0ca6d0b61cebe5d79ea9139bad62b0fb4c5d09b9a0723a2beb1"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "32948ae1f05c5109d98bee77dce62748462073930bf0caf8d775e1df16113e0f6d7a3dc2c717aa977220d20d386d191070e9dddfe1da788b18808fa1820f100594f5151ad257af53c8c3eb0adfe8bc9b9750d7079dec18714126f9073e0f7d21402ce1a66e06c3a28bad4010d432cdc56ee20143932b4ad2f4e8e4c0282a"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "74bad659d8d30dfd3244657050d195b7670549b8165e6b7da203ad27"}]}, 0x147c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB='umask=0000000000000epage=936,\x00\x00\x00\x00'])

18:17:02 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x3, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:02 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[], 0x2f)

18:17:02 executing program 4:
r0 = msgget$private(0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/251, 0xfb}], 0x1, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r1=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000540)=""/138, 0x8a}, {&(0x7f0000000600)=""/252, 0xfc}], 0x3}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/168, 0xa8}], 0x1, &(0x7f00000008c0)}}], 0x3, 0x40000002, &(0x7f00000009c0))
r2 = gettid()
tgkill(0x0, r2, 0x80000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, <r5=>0x0}, &(0x7f0000000a40)=0xc)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80)={0x0, <r6=>0x0})
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000ac0)={{0x2, r1, r4, r5, 0x0, 0x2548705c88bbb4ea, 0x800}, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x7, 0x97, 0x800, 0x8, 0x0, 0x2446, r6, 0xffffffffffffffff})
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="01000000000000007a431cbbb812a53cf78d7ce50815567228b3f967a3eb42827cc07e179e17c1cc4f9a0000000000010000ffed1f01fee6ee5b5f90c210a89de470175221ab27fa63835e40f07b25cb6f827ac3b675bf8af366e22ee7c41de5d12b5821f4cdb068ab83847693ee03e9b33c58c5bb16e691a4dce1b406121be0db69a6c4583c868c401c43801044b6a4b796ba89bf76a60595548d9bcfd11b3eed2dcbe8e70b3cea9f81357046dedaed750c2706b303e97bbf44b4a50b28f2680ce05ff93331207622d930605e78b0"], 0x8, 0x0)

18:17:02 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8100000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1984.487397] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
[ 1984.489184] msdos: Bad value for 'umask'
[ 1984.495451] msdos: Bad value for 'umask'
[ 1984.512694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1984.850531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:17:13 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/62}, 0x46, 0x2, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:17:13 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:13 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x9000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:13 executing program 7:
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(0x0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:17:13 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])

18:17:13 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(0xffffffffffffffff, &(0x7f0000000140)={0x1, "e0ef07a1a823b6439188331bc16686a49b037e883622b41e20e338645ae580c4397344d14b6b0dbc921742c6bebbc10635ee2ccaa53492761bf3fde41b5ef913c9a17347273fbea5243514a4a992e1910390022bb2b129334fe0a3cd77ef5320629e7f648d9745aff4af473a589010841ed7598a66771dca8494f93b24f011e8"}, 0x88, 0x0)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00\x00\x00'], 0x8, 0x0)

18:17:13 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x0, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:17:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

[ 1994.964107] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
[ 1994.972909] No source specified
[ 1994.991638] No source specified
[ 1994.992631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:17:13 executing program 7:
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(0x0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:17:13 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/197, 0xc5)

18:17:13 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x5b, 0x0)
r1 = msgget$private(0x0, 0x43)
msgrcv(r1, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x0, 0x3000)

18:17:13 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x7, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:13 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ebff001f08c2f800"], 0x8, 0x0)

18:17:13 executing program 7:
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(0x0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

[ 1995.168921] No source specified
[ 1995.178653] No source specified
18:17:13 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x13, "f5"}, 0x3, 0x3)

18:17:13 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1995.253744] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
18:17:13 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

[ 1995.285265] No source specified
[ 1995.291769] No source specified
18:17:29 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:17:29 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000140)={0x0, "992477863dc0ffd29e24ffb3a3ef5f9633ad7607675cb250956f10704db8c25d0de9b32d19885a8f36bfe28707c45102dffe06c8a1f6bb0acc35ff56d9422dc327b3ae0770a4caf6cf0d4161070c916c883792366936fcaff59851c20fd378282fefcb416ed9e9fd2635c9b0df33df4ebf718a192fa83398ce6fcd44d2f8accdd7a4e4fb1a8c93b3e81be8f2f1ae1c94408446618114d0d39a817f3ce6052a8ee8c64e99a4a9cdfab92e973148a652cc817071d0e1e0b51e7b4e649549c6c0acdfef3d892b1dc5798c655e0b25e424bc4ccc8ef55850e7cba491f08acfcc1c92e1"}, 0xe9, 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/64)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000280)=""/2)
r2 = msgget(0x2, 0x454)
msgsnd(r2, &(0x7f00000002c0)={0x1, "69aea73a2044380627096d24cc274034bf33c39beb48c844bcab81fcf66d8d9f3de4f70ac9e3b32e9b100f320696f651e9876e653a28f3f5543774ced3c98e1e1f29e60c5003e035873812c24bce4e36ee4ef46d78fdeeff14e67a3d5066a12a4beabdab9fcf49607f071b6542562fabd4e414aaa363e051862a585184ea04ce0b9b57cd121966a31d55f820ab5c45c667eb34c7bfc5fa881bf9a224c52ae5625d9e6166a7"}, 0xad, 0x800)
msgsnd(r1, &(0x7f0000000240)={0x55b9c7496f734ef2, "d3763e87151a542e9aa5e272bf922a7d"}, 0x18, 0x800)

18:17:29 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010010000000000031c1c2274ce9e81df087b27968b29c81108e1fb278793c2a9d3fe1ffc666cbd9c28eab344c3d1908717a28fde2511d20adc53b9db5982d8cda942173805d371e76370ab69fc1299f9ccb1d1c6e060e9ddfa70e7842bdd1098fe61cacdc9d8da0115cad8d984f3481b907889e391d28bb52774580ff8b9dfd55612122c6bc77e955e20955a26208189adc7437a82cc72c0cd1f438158ed0ac9a2a00"], 0xa3, 0x800)
msgrcv(r0, &(0x7f0000000200)={0x0, ""/210}, 0xda, 0x1, 0x2800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x2000)

18:17:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_a, @random="7e3b5710a640", {0x3, 0x7f}}, @val={0x0, 0x10, @random="ee2dfdd86599fd07143a549af76f71a6"}, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x4, 0x0, {0x6, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x1, 0x2, 0x3}}, @void, [{0xdd, 0x43, "b133b2e24bfd77b36b2124bbf5ede8d57ba437c6ffd2d06f0a75b2384b9f6df2524c4f7dd8394afffd43a9c0662ccca2cb30585703df50bdeceb54dba07952d26b9fe1"}, {0xdd, 0x4e, "e89a76ecc7ce39876e3cd020fb9c96d576e502dbd22a8d779349528adee10d8affaea1bf23c4ec696e7bfa9cbf11daf8c49ad17d2141895f7288371939db8369904fb1bcdfca2f165b4172bd9c51"}, {0xdd, 0x51, "c1433ec7d94e235ecded20fc615ad90889af900779849c2356f59880939e988107922292f365815a6e41b5306204d3adaaed29bb1dfa3aa9d973d3b90c666b0a7263c903ae323bea9200bc308846eaaf6f"}, {0xdd, 0x54, "d00eda90de25d3d9e645b4252282581daba0be425a387b8033116263964d1727c9142d787b35f142c9fa81362e8195209551c2b7af13229a3412aa1a0c208d5bb6717dd4e0164576ed46fe08000b30c5266f590e"}, {0xdd, 0x5c, "77cad66e87832510d23642e000f3df5e1297309ec95968ffe626524ba8b8575a23f8ef6369c0efbd4b5bc9a233d166aa42d649f0e113f6d2c2513b15f3f345c995495f1f2134dcec89df7fe627f731bb1675717a0932df46f99fa75b"}]}, 0x1e2)

18:17:29 executing program 6:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x10}, 0x2, 0x3)

18:17:29 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:29 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x0, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:17:29 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2011.739774] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
[ 2011.773204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2011.779869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:17:30 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x9, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:30 executing program 6:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[])

18:17:30 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="060000de06e2bc00"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:17:30 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)
r1 = msgget$private(0x0, 0x80)
msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/28)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/144)

[ 2011.936448] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
[ 2011.956898] No source specified
[ 2011.969891] No source specified
18:17:30 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7fb0fcad000000001111a0e782e9eda6cdc33621748300000000000000f029ca2d46103fb22e2d6142c8dba058945f36f081edf8f6c4aa8a7ba086724bd456819d54af8f588373f2bf26f44e"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/161}, 0xa9, 0x1, 0x1800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:17:30 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x0, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:17:30 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xa, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:30 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x80)

[ 2012.108938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2012.121466] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
[ 2012.127803] No source specified
[ 2012.136553] No source specified
18:17:42 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:17:42 executing program 1:
r0 = msgget$private(0x0, 0x20)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099917d6900"/161], 0xa1, 0x0, 0x3000)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r0, 0x0)

18:17:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x10000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:42 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x0, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:17:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @default, @random="33e03a24a11d", @broadcast}, 0x10)

18:17:42 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00')
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x65, 0x33, 0x38, 0x61, 0x30, 0x35], 0x2d, [0x34, 0x62, 0x64, 0x30], 0x2d, [0x38, 0x61, 0x5b, 0x39], 0x2d, [0x32, 0x36, 0x32, 0x35], 0x2d, [0x32, 0x61, 0x34, 0x62, 0x64, 0x36, 0x30]}}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}})

18:17:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xb, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2024.157135] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2024.173787] No source specified
18:17:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x20000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:42 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/160}, 0xa8, 0x2, 0x0)

[ 2024.184650] 9pnet_fd: Insufficient options for proto=fd
[ 2024.186147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2024.190635] No source specified
[ 2024.199444] 9pnet_fd: Insufficient options for proto=fd
[ 2024.202436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2024.252725] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:17:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:42 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'})

18:17:42 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x0, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

[ 2024.316165] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 2024.320241] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:17:42 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x20100000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x300, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2024.387726] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:17:42 executing program 6:
r0 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r1 = memfd_secret(0x80000)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x205440, &(0x7f0000000080)=ANY=[@ANYBLOB="aa15616e733d66642c7266646e6f3d23caf0fb98f20d8df97eff5c1eaf3c5881edd513663f00c48a60e5c6f13598491196dd399fc1128814dc40c949157953719acd6f6593a1060bd3be1b293625eb0d4c886a2105b8b29f279fa400"/101, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltuid=', @ANYRESHEX=r2, @ANYBLOB="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"])

[ 2024.421498] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
18:17:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x700, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2024.437777] No source specified
[ 2024.449049] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 2024.546157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:17:52 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
getresuid(&(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0), &(0x7f0000000100)=<r2=>0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setresuid(0x0, r3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
r6 = geteuid()
setresuid(r6, r1, r5)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@cache_none}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, '#'}}, {@access_user}, {@version_u}, {@version_u}, {@cache_mmap}, {@mmap}, {@privport}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@uid_lt={'uid<', r2}}, {@fowner_gt={'fowner>', r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'codepage'}}, {@smackfsroot={'smackfsroot', 0x3d, 'codepage'}}, {@uid_eq}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@euid_lt={'euid<', r4}}]}})

18:17:52 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x0, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:17:52 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x810, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:52 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x40000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x2f)

18:17:52 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001140)={0x1, [{}, {<r1=>0x0, <r2=>0x0}, {<r3=>0x0, <r4=>0x0}, {}, {<r5=>0x0, <r6=>0x0}, {0x0, <r7=>0x0}, {<r8=>0x0, <r9=>0x0}, {<r10=>0x0}, {<r11=>0x0}, {0x0, <r12=>0x0}, {<r13=>0x0}, {0x0, <r14=>0x0}, {<r15=>0x0, <r16=>0x0}, {<r17=>0x0}, {}, {0x0, <r18=>0x0}, {<r19=>0x0, <r20=>0x0}, {<r21=>0x0, <r22=>0x0}, {<r23=>0x0, <r24=>0x0}, {<r25=>0x0}, {<r26=>0x0, <r27=>0x0}, {<r28=>0x0, <r29=>0x0}, {<r30=>0x0}, {<r31=>0x0, <r32=>0x0}, {<r33=>0x0, <r34=>0x0}, {<r35=>0x0, <r36=>0x0}, {0x0, <r37=>0x0}, {0x0, <r38=>0x0}, {0x0, <r39=>0x0}, {}, {0x0, <r40=>0x0}, {<r41=>0x0, <r42=>0x0}, {0x0, <r43=>0x0}, {<r44=>0x0}, {0x0, <r45=>0x0}, {<r46=>0x0}, {0x0, <r47=>0x0}, {0x0, <r48=>0x0}, {}, {<r49=>0x0, <r50=>0x0}, {<r51=>0x0, <r52=>0x0}, {}, {}, {}, {<r53=>0x0, <r54=>0x0}, {<r55=>0x0}, {0x0, <r56=>0x0}, {<r57=>0x0, <r58=>0x0}, {<r59=>0x0}, {0x0, <r60=>0x0}, {}, {<r61=>0x0, <r62=>0x0}, {}, {<r63=>0x0, <r64=>0x0}, {<r65=>0x0, <r66=>0x0}, {<r67=>0x0, <r68=>0x0}, {<r69=>0x0, <r70=>0x0}, {0x0, <r71=>0x0}, {}, {}, {<r72=>0x0}, {0x0, <r73=>0x0}, {}, {<r74=>0x0, <r75=>0x0}, {0x0, <r76=>0x0}, {}, {<r77=>0x0, <r78=>0x0}, {<r79=>0x0, <r80=>0x0}, {0x0, <r81=>0x0}, {<r82=>0x0, <r83=>0x0}, {0x0, <r84=>0x0}, {<r85=>0x0}, {<r86=>0x0, <r87=>0x0}, {}, {<r88=>0x0}, {<r89=>0x0, <r90=>0x0}, {<r91=>0x0}, {<r92=>0x0, <r93=>0x0}, {<r94=>0x0, <r95=>0x0}, {<r96=>0x0, <r97=>0x0}, {0x0, <r98=>0x0}, {<r99=>0x0, <r100=>0x0}, {<r101=>0x0}, {}, {<r102=>0x0, <r103=>0x0}, {<r104=>0x0, <r105=>0x0}, {}, {<r106=>0x0}, {<r107=>0x0}, {<r108=>0x0}, {<r109=>0x0, <r110=>0x0}, {<r111=>0x0}, {0x0, <r112=>0x0}, {<r113=>0x0}, {<r114=>0x0}, {<r115=>0x0, <r116=>0x0}, {<r117=>0x0, <r118=>0x0}, {0x0, <r119=>0x0}, {<r120=>0x0, <r121=>0x0}, {<r122=>0x0}, {}, {}, {<r123=>0x0}, {<r124=>0x0, <r125=>0x0}, {0x0, <r126=>0x0}, {<r127=>0x0, <r128=>0x0}, {<r129=>0x0, <r130=>0x0}, {<r131=>0x0}, {}, {<r132=>0x0, <r133=>0x0}, {<r134=>0x0}, {}, {<r135=>0x0, <r136=>0x0}, {<r137=>0x0}, {<r138=>0x0}, {<r139=>0x0}, {<r140=>0x0}, {0x0, <r141=>0x0}, {}, {<r142=>0x0, <r143=>0x0}, {<r144=>0x0}, {<r145=>0x0, <r146=>0x0}, {<r147=>0x0, <r148=>0x0}, {}, {<r149=>0x0}, {<r150=>0x0, <r151=>0x0}, {<r152=>0x0, <r153=>0x0}, {<r154=>0x0, <r155=>0x0}, {}, {<r156=>0x0}, {<r157=>0x0}, {}, {<r158=>0x0}, {<r159=>0x0, <r160=>0x0}, {}, {0x0, <r161=>0x0}, {0x0, <r162=>0x0}, {<r163=>0x0}, {<r164=>0x0}, {<r165=>0x0}, {<r166=>0x0, <r167=>0x0}, {0x0, <r168=>0x0}, {<r169=>0x0}, {<r170=>0x0, <r171=>0x0}, {<r172=>0x0, <r173=>0x0}, {<r174=>0x0}, {<r175=>0x0, <r176=>0x0}, {<r177=>0x0}, {0x0, <r178=>0x0}, {0x0, <r179=>0x0}, {<r180=>0x0, <r181=>0x0}, {<r182=>0x0}, {<r183=>0x0, <r184=>0x0}, {<r185=>0x0, <r186=>0x0}, {<r187=>0x0, <r188=>0x0}, {<r189=>0x0}, {<r190=>0x0, <r191=>0x0}, {<r192=>0x0, <r193=>0x0}, {<r194=>0x0, <r195=>0x0}, {<r196=>0x0, <r197=>0x0}, {<r198=>0x0}, {}, {<r199=>0x0}, {0x0, <r200=>0x0}, {0x0, <r201=>0x0}, {}, {<r202=>0x0, <r203=>0x0}, {<r204=>0x0, <r205=>0x0}, {<r206=>0x0, <r207=>0x0}, {<r208=>0x0}, {<r209=>0x0}, {}, {<r210=>0x0, <r211=>0x0}, {<r212=>0x0, <r213=>0x0}, {0x0, <r214=>0x0}, {<r215=>0x0}, {}, {<r216=>0x0, <r217=>0x0}, {<r218=>0x0, <r219=>0x0}, {}, {0x0, <r220=>0x0}, {0x0, <r221=>0x0}, {<r222=>0x0, <r223=>0x0}, {<r224=>0x0}, {<r225=>0x0}, {}, {}, {<r226=>0x0}, {<r227=>0x0, <r228=>0x0}, {0x0, <r229=>0x0}, {<r230=>0x0, <r231=>0x0}, {<r232=>0x0}, {<r233=>0x0, <r234=>0x0}, {0x0, <r235=>0x0}, {}, {<r236=>0x0, <r237=>0x0}, {<r238=>0x0}, {<r239=>0x0, <r240=>0x0}, {}, {}, {<r241=>0x0}, {}, {<r242=>0x0, <r243=>0x0}, {0x0, <r244=>0x0}, {}, {0x0, <r245=>0x0}, {0x0, <r246=>0x0}, {<r247=>0x0}, {0x0, <r248=>0x0}, {<r249=>0x0}, {<r250=>0x0, <r251=>0x0}, {0x0, <r252=>0x0}, {<r253=>0x0}, {<r254=>0x0, <r255=>0x0}, {0x0, <r256=>0x0}, {<r257=>0x0}, {0x0, <r258=>0x0}, {<r259=>0x0, <r260=>0x0}, {<r261=>0x0, <r262=>0x0}, {<r263=>0x0}, {<r264=>0x0, <r265=>0x0}, {<r266=>0x0}, {}, {0x0, <r267=>0x0}, {<r268=>0x0}, {<r269=>0x0, <r270=>0x0}, {<r271=>0x0, <r272=>0x0}, {<r273=>0x0, <r274=>0x0}, {0x0, <r275=>0x0}, {<r276=>0x0, <r277=>0x0}, {}, {<r278=>0x0}, {0x0, <r279=>0x0}, {<r280=>0x0, <r281=>0x0}, {<r282=>0x0, <r283=>0x0}, {0x0, <r284=>0x0}, {<r285=>0x0, <r286=>0x0}, {}, {<r287=>0x0}, {}, {}, {<r288=>0x0}, {0x0, <r289=>0x0}, {<r290=>0x0, <r291=>0x0}, {<r292=>0x0, <r293=>0x0}, {<r294=>0x0}, {<r295=>0x0}, {0x0, <r296=>0x0}, {}, {0x0, <r297=>0x0}, {}, {0x0, <r298=>0x0}, {0x0, <r299=>0x0}, {<r300=>0x0}, {<r301=>0x0, <r302=>0x0}], 0x9, "21b3e52ebc1ef8"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000140)={0x4, [{r287, r275}, {r138, r231}, {r190, r7}, {r91, r118}, {r51, r240}, {r208, r39}, {r77}, {r192, r302}, {r107, r243}, {r175, r251}, {0x0, r151}, {r224, r217}, {r215}, {r17, r220}, {r164}, {r13, r299}, {r120, r207}, {r241, r178}, {r202}, {r55, r277}, {r226, r83}, {r158, r297}, {r285, r146}, {r108, r262}, {r290, r18}, {r85, r2}, {r157, r48}, {r129, r14}, {r122, r279}, {r218, r76}, {r49, r95}, {r99, r2}, {r212, r197}, {r139}, {r152, r4}, {r268, r71}, {r104, r171}, {r172, r252}, {r154, r6}, {r57, r235}, {r113, r151}, {r285, r265}, {r21}, {r135, r297}, {r72, r213}, {r215, r234}, {r170, r229}, {r89, r29}, {r31, r181}, {r132, r240}, {r11, r22}, {r134, r90}, {r182, r203}, {0x0, r220}, {r131}, {r111, r151}, {0x0, r76}, {r202}, {r278, r251}, {r196, r148}, {r79, r126}, {r72, r277}, {0x0, r27}, {r67}, {0x0, r130}, {0x0, r50}, {r91, r262}, {r295, r50}, {0x0, r40}, {r169, r283}, {r227, r83}, {r106, r281}, {r266, r118}, {r92, r289}, {r224, r161}, {r250, r251}, {r292, r9}, {r33, r176}, {r96, r176}, {r96, r179}, {r209, r143}, {r194, r255}, {r174, r248}, {r157, r223}, {r72, r281}, {r144, r186}, {0x0, r76}, {r117}, {r285, r193}, {r210, r167}, {r242, r136}, {r140, r73}, {r129, r18}, {r149, r119}, {r254, r237}, {r123, r240}, {r72, r50}, {r28, r203}, {r238, r52}, {r290, r119}, {r271, <r303=>r125}, {r236, r160}, {r44, r265}, {r41, r12}, {r129, r80}, {r300, r296}, {r150, r62}, {r88, r223}, {r10, r153}, {r115}, {r288, r66}, {r198}, {0x0, r36}, {r215}, {r222, r141}, {0x0, r291}, {r259, r186}, {r164, r38}, {r1}, {r57, r181}, {r79, r260}, {r96, r195}, {r163, r50}, {r3}, {r194, r155}, {r183, r173}, {r96, r42}, {r30, r279}, {r145}, {r114, r270}, {r241, r84}, {r154}, {}, {r230, r20}, {r8, r211}, {0x0, r203}, {}, {r19, r121}, {r287, r66}, {r180, r97}, {r65, r100}, {r46}, {r159, r262}, {r170, r162}, {r239, r68}, {r185, r112}, {r192, r167}, {r159, r141}, {r137}, {r216, r22}, {r132, r73}, {r63, r37}, {r113, r219}, {r135, r205}, {0x0, r258}, {r257, r244}, {r206, r87}, {0x0, r16}, {0x0, r128}, {r59, r16}, {r259, r121}, {r247, r298}, {r147, r54}, {r127, r179}, {0x0, r133}, {r187, r211}, {0x0, r103}, {0x0, r184}, {r85, r214}, {r194}, {r185, r105}, {r82, r78}, {r61, r148}, {r264, r168}, {r166, r110}, {r263, r27}, {r249, r184}, {r142, r70}, {r5, r98}, {r288, r260}, {r301, r272}, {r53, r148}, {r13, r128}, {r86, r64}, {r57, r265}, {}, {r269, r22}, {r177, r223}, {r204, r283}, {r280, r54}, {r35, r93}, {r134, r128}, {r199, r245}, {r218, r45}, {r109, r178}, {r96, r56}, {r232, r83}, {r271, r289}, {r69, r184}, {r10, r60}, {r23, r201}, {r164, r9}, {r94, r299}, {r108, r130}, {r259, r22}, {0x0, r34}, {r247, r4}, {r28}, {r25, r221}, {r225}, {r273, r37}, {r96, r47}, {r165, r29}, {r102, r284}, {r53, r24}, {r164, r274}, {r147}, {r35, r9}, {r253, r234}, {r261, r81}, {r85}, {r33, r110}, {r140}, {r124, r286}, {0x0, r126}, {r294, r168}, {r99, r200}, {r138, r43}, {r156, r217}, {r199, r38}, {r101, r221}, {r172}, {r263}, {r273, r143}, {r113, r256}, {r233, r39}, {r285, r168}, {r276, r279}, {r190, r293}, {0x0, r116}, {r91, r246}, {0x0, r228}, {r107, r27}, {r282, r173}, {r67, r58}, {r74, r75}, {r210, r267}, {r99}, {r140, r32}, {r35, r191}, {r164}, {r26, r188}, {r154, r176}, {r69}, {r189, r229}], 0x0, "15e18536245751"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002140)={r303, r15, "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", "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"})
r304 = msgget$private(0x0, 0x0)
msgrcv(r304, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r304, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:17:52 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:17:52 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000140)={0x1, "77137936629d287d78aed1ac95853eb86507ca7d7040ccf9d4196103915e7f1285ad7053db4c58dc3e6ab5280ab9ad2c98c937904b9de63bdafd20d8b6407fb17d0919a7d608ade57b96"}, 0x52, 0x800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000000000495275900609304216e6adc1131a92cff7e064512f4c9e9157cbe87cd82e2e4550d018927ffc3b7ffb7ada14ec757b3bde5a01160c37eb03d96c11883a8c51cacf1bb8e212aefa19dde3b0b4fc66afcc3d9b0f962b893751562f0ba81912d147ceefe6"], 0x5c, 0x800)

[ 2034.765890] No source specified
[ 2034.768795] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 2034.771646] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 2034.776313] No source specified
[ 2034.813682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:17:53 executing program 6:
ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:17:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8cffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x900, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:53 executing program 1:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x100)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000440)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x40000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@version_u}, {@cache_none}, {@privport}, {@version_u}, {@nodevmap}, {@noextend}], [{@smackfshat}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, ':'}}, {@fsname}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_role={'obj_role', 0x3d, '!\'}'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']{&4\\\''}}, {@appraise}, {@euid_lt={'euid<', r2}}]}})
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf25010000000500040001000000052102000a00000014000900000000000000000000000000000000f8040003001d00000008000800640101010400050006000a004e220000050002000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
r3 = msgget$private(0x0, 0x90)
msgsnd(r3, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r3, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r4 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r4, 0x0)
msgsnd(r4, &(0x7f0000000240)={0x2, "552259176107a86305a49f74acd4f3a8c854bd51a6c20b6cdfd9112c835da4d6bb455ca79c9b2b"}, 0x2f, 0x0)

[ 2034.892562] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
[ 2034.895130] No source specified
[ 2034.897657] No source specified
18:17:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:17:53 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000140)={0x2, "44ffc880ee93db72bff0e047dbd6a873098d97632e2b3eeb82331ed01b57901b301f778c39eb38b32294c2db9987b8fdb941485e71fcc0c79d725bc9d19624f8052da604429a1d7ea2a74d9b6feb550e59e7d62ef634ca40b9c9c0d91c"}, 0x65, 0x0)
msgsnd(r0, &(0x7f00000001c0)={0x1, "1652dc6e7d73e66b67033c57bad7ad0b70f9f4389abb52187909c4907d8662ddf541c08ccdcb6a05f14a8104734f777628188b2b513e693d15463a068e472c80c143dae3f1e03811d17705ad4d00d041187019b5a957e53b795427fb6375fce87c11621268cc0b5e60b40bd841d4e191000373629ea85b95b4dc76a6f847e58d38a1e4b900f9c349bb119a18736ea71229564b8a986b74805d1a90a5bcc5063074debd660a6349b245e9fd179bb6e8490ffca7502be76ae421c0952dcfdec1dfc5cd7bebc765910c45e31ec876d7c05a"}, 0xd8, 0x800)

18:17:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xa00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2035.012017] No source specified
[ 2035.014142] No source specified
[ 2035.020473] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:17:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xc0ed0000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:17:53 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0x0, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:17:53 executing program 6:
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x20013, 0xffffffffffffffff, 0x27573000)
readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/118, 0x76}, {&(0x7f0000000080)=""/217, 0xd9}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000380)=""/161, 0xa1}], 0x6)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

[ 2035.102581] No source specified
[ 2035.105068] No source specified
[ 2035.146908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:18:04 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000010000733ae820974e879a304421c042227bbec6b01b7513c0667c494da469d8dc14d418be5073a7b66b836eeac5df5f19667db78fcb3d802853d0e9b88abac5a54afc1277cc6924f746118821b593bc0f2a"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/147}, 0x9b, 0x3, 0x3000)

18:18:04 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:18:04 executing program 5:
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x55000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x295}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc001}, 0x800)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:18:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xf6ffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xb00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:04 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget(0x3, 0xbc)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/5}, 0xd, 0x0, 0x3800)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:18:04 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x8}, 0x100, './file0\x00'})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/101, 0x65}], 0x6, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f9b05df}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c804}, 0x20000001)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20801c04}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x84, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x8d0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000001c0)={0x0, 0x23, 0x1, [0x6, 0xffffffff00000001, 0x6, 0x9, 0x8], [0x5, 0xa288, 0x8001, 0x7, 0x101, 0x9, 0xae2, 0x60, 0x982, 0xcd3, 0x625a, 0xe18, 0x2, 0x9, 0x7f, 0x1, 0x8, 0x9, 0x8, 0x800, 0x9, 0x1, 0x8, 0x1, 0x5, 0x3, 0x3, 0xa372, 0xaab, 0x7ff, 0x8000, 0x7, 0x400, 0x0, 0x8, 0x7ff, 0x80, 0xc4, 0xff, 0xec60, 0x8, 0x80, 0x8, 0x3, 0x5a7c, 0x8, 0xfffffffffffffff8, 0x7, 0x92, 0x0, 0xe53bc1c, 0x1ff, 0x804, 0x4, 0x66, 0x200, 0x3, 0x7fff, 0x0, 0x1, 0x80000000, 0xff, 0x1, 0x100000000, 0x1, 0x1, 0x1, 0x10000, 0x101, 0x120000000000000, 0x7ff, 0xffffffff, 0x0, 0x581, 0x58, 0x1ff, 0x3, 0x8f31, 0xffff, 0x7fffffff, 0x7f, 0x5, 0x8, 0x7, 0x5, 0x3ff, 0x401, 0x3, 0xffffffff, 0x80, 0x1f, 0x6, 0x9, 0x7, 0x0, 0x7f, 0x7, 0x5, 0xbb0a, 0x2, 0x8, 0xfffffffffffffffa, 0x20, 0x3, 0x7ff, 0x1, 0x1, 0x100000001, 0x2, 0x9, 0x6, 0xffff, 0xd033, 0x3, 0x3, 0x0, 0xff, 0x5, 0x8, 0x3, 0x2]})

18:18:04 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0x0, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:18:04 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="9c6700000000060088066d4683ad37721da6ce5cceb0f3bab2de91f333929cc36200d99c5d568f9e8aac65f52f420138d447c9ad37b28ceecf3add734a6c0000000000000007e3b707594c74cd32d922f6dceac181b55b236f2fadb568df6cbfd340087c3975166d6e6eb176ffffff7fbb20603616330629ec702b33332dea72e379888704eec174c02d4b43eaf6b94edababdaeafe1e3712ec4d045e5b0eac0f9491ec7176d4dc427"], 0x82, 0x0)
r1 = msgget(0x1, 0x116)
msgsnd(r1, &(0x7f0000000000)={0x2, "cbac5a34aa2abf8f4d476d453d1a2abba54150a2d2736b8fd4e02b80a19b27cd3a960ac2f213a07ae0fd489a4d36e12055e2b6138f95da6270bdc297c7d3d2ff24e79b76d4d5b80ba84b4f732861bdc0f3ab91dd3199e71bea92f773d935ab2f6e72b4505a67df8376b4a1de29c75de5b5dfd623"}, 0x7c, 0x0)
msgsnd(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000090ced503108a943c3554f6efb8", @ANYBLOB="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"], 0x8, 0x0)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgsnd(r2, &(0x7f0000000300)={0x0, "05b16cef94aab0cdf66e3da2a745bd8d35c82f4fb4052d9c3a12c589328444bc1115c49c67b7df86fc5c86ed74f9d862284828e21aac652d81fd5763bc142207bc8eb9f914fde4494aa735dd69a62aa74d13db"}, 0x5b, 0x800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/152}, 0xa0, 0x3, 0xc00)
msgsnd(r1, &(0x7f0000000200)={0x0, "337546f1c19dccdd11505a8105129a1685fcb84ed48c101bc96aa7129dac9abf74ca5d9e1d660fdb7794f61a7cd34862c4822becb0006e028730c4ddb029ced8f81419f979e6f9bdae6683072d6e68da38ac42db8bb57c986360980cc8be3fa4073c279c31ae843abdb87e631d8bde7985dda75d1aa2828e63a7a63c680eb06764b9d123c3138eef47deef4cf677b599b9c6296108897c2ffdfb6e5937d5ce90d657bb06c65fdbb1bbc854b1f05cc910903f3e"}, 0xbb, 0x800)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/57)

18:18:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeff0000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2046.350370] No source specified
[ 2046.355061] kernel write not supported for file [eventfd] (pid: 5623 comm: kworker/0:0)
18:18:04 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000140)={0x0, "a990bc9d0a55469864a19e90c7ccacebe3a525af5699c082f886a3b2708d722700006fd29ee5aac06fee793fbece7b3e2cf7bbbb18745787a558a429e3ae93b6362a834697386881928fd63adeb466b0a3eeda3bde2f9217979736d70cab2ed4b798de1d40757e12236def4a427cc2d6a8cad7897862227ce77c1879654d004b1084ba2ec2f86c333661b34f524e007b85930dffb0fb3794eac03acd5ceb068933dea42826762a18daf81fc770fd78242b126b9acdfe60a7eaa1af60306164ebd4"}, 0xc9, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/161], 0xa1, 0x3, 0x3000)

[ 2046.396683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:18:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x1008, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2046.505434] No source specified
[ 2046.737464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:18:16 executing program 6:
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x7f)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x3, 0x2])
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB="756d6173633d303030303030303030303030303030303030303002611383a8528262706167653d3933362c00"])

18:18:16 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xffff0000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:16 executing program 1:
msgget$private(0x0, 0x0)
r0 = msgget$private(0x0, 0x14)
msgctl$IPC_RMID(r0, 0x0)
r1 = msgget$private(0x0, 0x421)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000c14424714e820c137a7cc2754f4d65b1f14b4830afb5a742a4f61d7941823b8efe80f31bf2ca184526574ca70158eeafed71ea0b1ebec8cf99bda0df085649f96d5153f59454385f183becbc439d611769baf92b12e3bb0f489ede62331a128f3b3e3a529813c5fa08453671a2538a311658cc82b0bf16493b814d7fce8fa2dd9cf8f4ef4bf492446baafa190a453b86ba0864b88dc2e2ab8493dda4dffe78a2e7535657c5c232c67694fef6e8816bb214b24963cfecea660e97e05c3e00"/213], 0x8, 0x0)
r3 = msgget$private(0x0, 0x13)
msgsnd(0x0, &(0x7f00000001c0)={0x2, "b069a55c2ffdf7caaea5ad060dd5fc64c400c4ce41b4fb81dbe02362b2fa9d7ce6e3016cc3850ad4de85df7b73308da12a88515da993b745720d63a927e3a13187fd5e41cde2299d81548cd4ad42e57fce71957a812ca1cd78a201a23fe7b4b704cb3e6bc7f3dacd6d1c5680dedfe05f6a3866a170eb8990df9285bfb3140231d29bee6d802d6f726b05fcd109bf0c30466f239603171c45c8dd12308afba6681e2e4e8c1caba14edf936eec7ea0d46c53ac5e65c69267fed99d5eb2864bbf92f36c0a2df1c784"}, 0xcf, 0x800)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000003c0)=""/131)
r4 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r4, 0x0)
msgsnd(r4, &(0x7f00000002c0)={0x1, "cfc7a27b9f6c0a375e48bcaffba07118625425379d726607989826c1f2ee1bc6e3141cc2ebaef14aa1413baaa7c6fbb7124e053f37aeae62e39dff3d448f2e6f87dba1b77a5c43321f719cf55dd468be29f2570dd80486a313f872a96fa7f3a56c467a98618bc6f8e3a296716e7d38290ba858201451353acc1f2f2bd6005940de5765cf190a9b3528823440092c9904ed47b5237da25bcc335103868e2216f53a4b2cd0aa5b06cdde0bb642229c2cf642f9a09cf3e4f77ae079"}, 0xc2, 0x800)
msgrcv(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed517ff3382912caf3be83ef36a8000000000000000000"], 0x99, 0x3, 0x1000)

18:18:16 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:18:16 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0x0, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:18:16 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x1020, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:16 executing program 5:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0x101}], 0x1)
semtimedop(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = semget$private(0x0, 0x3, 0x200)
semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000100)=""/218)
r2 = semget$private(0x0, 0x5, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x101}], 0x1)
semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000240)=""/148)
semtimedop(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semtimedop(r2, &(0x7f0000000040)=[{0x4, 0x7, 0x1000}, {0x4, 0x8, 0x1000}, {0x3, 0x640a, 0x1000}, {0x4, 0x80}, {0x4, 0x9, 0x800}, {0x4, 0xc7, 0x1000}, {0x0, 0x8001, 0x1800}, {0x3, 0x7fff, 0x1800}], 0x8, &(0x7f0000000080)={0x77359400})
semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f00000003c0)=""/4096)
r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x2f)

18:18:16 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x2, "b229"}, 0xa, 0x800)

[ 2057.988730] msdos: Unknown parameter 'umasc'
[ 2057.993120] msdos: Unknown parameter 'umasc'
18:18:16 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1280, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setresuid(0x0, r0, 0x0)
r1 = gettid()
tgkill(0x0, r1, 0x80000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r1, 0x6})
r4 = gettid()
tgkill(0x0, r4, 0x80000000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r6, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r4, 0x6})
r7 = gettid()
tgkill(0x0, r7, 0x80000000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r9, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r7, 0x6})
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r0, @ANYBLOB="040007000000000308000100fcfef5e7375cd2e6b8566547283bcd891a6c48df2f6ee42e38d6618566617f5b8480457c4b726322c66c7404ad42d255560a5d69f0fc8c983d94067d85d112383449018b0405d484ba0a7a19f09b3836a38569d1c5096c21220fe636643480157d7ea03a7683a4cf8b74ad0874ba7a2751927062ff1482022657c0c5184a3865c7ab0dccdaed12d5035b369f053857", @ANYRES32=0xee01, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="10000100000000002000040000000000"], 0x64, 0x2)

[ 2058.038864] No source specified
18:18:16 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2058.096701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:18:16 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB="756d61736bfc30303030303030303030303030303030303030303030302c636f6465706167653d3933362c00"])
r0 = gettid()
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002700), &(0x7f0000002740)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r0, 0x6})
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xb5ea, 0x8, &(0x7f0000002540)=[{&(0x7f0000000080)="0222fb4a8c5b0f51c58e2e4da00e0e6db646611aac921d8be29ec2a28672c4828172942a5ca5d7ce37932a4270623ea62fb43799e3ae015b0b6d97bc4edd1bf65aba2aee31334597e556c4308d7d311f7914c9e089df90e462eaba73f0d729238fb53f2bfb379a3bacf7f989a12c25eeb3a17a2d8a4f63590f0b9ff7d3200a75d339ab08050cfed7cdbe1a395f1e1f1d138a31acd39ddf1b017775884f71eafc8559a14995a48276bcb150a94c36ad3af0ef4eb6faf8fb105a251c9a668d76a9c03adcf6a1f753d0291f235dc0d2660b9c37fb2e700dd9f8274732e1e57afde6", 0xe0, 0x101}, {&(0x7f0000000180)="e27fa3b3f219593334205882606edfca0d9b78135d882c447588ec07fb193fccbfc2dae087bedf10d2a608515547539e99bf430d8d1577aa27141b4fd25496003002c7b9961ce1f9e24133a87218d11b20288ee750ce9a489ca488890e4fb7bdda2a39dec0134ac05132b08070c5cee15ce3b835ce3eab3d1e069a0dbc39721aa7f6987d70d76948960bc1a3e97057dab8477323f9a1c744a21a13098d6a2ef4a02eb10c7773c7501fd991bda8e13d6ab13539611887c738fcc5c3d758ae6b18006d5dc0ac25d0b4dbbee872d0710b9028fa2fd8ba1adc73c750d41c5b775694da6b99e5d9f1996f2dafe1a4e3cfb9d6b11903", 0xf3, 0x1f}, {&(0x7f0000000280)="6009669065dc385f6b4c0f1e3b5d31268c586846aeedfabca38d518fd7ba8a29486ada00ec1c81af77920942c1f428267e7ebe0f573470e3554138066264176a5169ca55c5f1800925d84edd72d222e72ac0676c038c3966bece7416aab36e6cfefed995f4ac31f6b41edd709d14a2843326f919c7f8b6a545a0166cbc9cbe0c8fc28b5d10a984c7433bf4f19f38b22c2b481c10dc497d", 0x97, 0x4}, {&(0x7f0000000340)="68667bb7a8eb05fbb8d561a0d07c7b3cfec10ae8769b8b5d7c8e276ece817b0d0bc5033fc7942fe1c3b6923801dc02dd4ea2673c1055d2735d34e9d0b586f306ba200d0b1e038ab29b5bfda8ce7eedf4da2380b5866234d13ebaf04ec4d21a35b4eda2ba9d77f0ea792124987ac3939f15e6777c0bdd05ed2caa4967d169c084f3d5a803151a975739316ade7e40de8db4822558c4001d86830f262052441eb79520794ea8dd33b5f5434960de6f0190d5244349901187a6d6fb070bde620d0d", 0xc0, 0x5}, {&(0x7f0000000400)="a73f2c801702a8360236cedbddc8e6306dbf8f7fe06252f88a1b9e9e73f3b9dca2d93e6324b1e813c4ed1353e361251c53b611dcbbe61c06bb888580c1484c13a302132823ed3a1c1069da7e4cd3c81393e208a4fce96d2104c60c10c2a651c5c53b3da2712f1fb32b8e7c8bd1212378e81692f53d7620e39ceb0bdcd957b74c6bf1cd0b52194b92b5aaa39164e6d64bfdd595fdc5ed719901fe678eafa92790e5deb62db79fe3acabf35dcee0254eac294c91a9ecd1778856766d94e2940b4a62add9d01a1cac28a9f7c346b4943d14c630f44b47514591b2aa10fa7bed9f6bb66c5d00bf8f7ff3005c78", 0xeb, 0x7}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="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", 0x1000, 0x4d}, {&(0x7f0000002500)="0a68f452b2ff8a25466eb875ad63d7327909ac616fcd582bd28e02c8d5aaaec27a42ca4127da21dd0c9a379f2444ede466213f5c", 0x34, 0x1}], 0x1010001, &(0x7f0000002600)={[{@fat=@gid={'gid', 0x3d, r2}}, {@fat=@errors_continue}, {@dots}, {@fat=@discard}, {@fat=@discard}], [{@fowner_eq}, {@appraise_type}, {@subj_user}, {@fowner_lt={'fowner<', 0xee00}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@subj_type={'subj_type', 0x3d, '\xff]'}}, {@dont_measure}]})

18:18:16 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2010, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:16 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 2058.161524] msdos: Unknown parameter 'umaskü00000000000000000000000'
[ 2058.170153] loop6: detected capacity change from 0 to 90
[ 2058.175043] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 2058.183313] msdos: Unknown parameter 'umaskü00000000000000000000000'
[ 2058.189315] loop6: detected capacity change from 0 to 90
[ 2058.193794] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
18:18:16 executing program 6:
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc844)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:18:16 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xffffff8c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:16 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2058.274840] No source specified
18:18:16 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x0, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 2058.312025] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
[ 2058.420163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2061.017899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2061.021791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2061.023705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2061.030360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2061.035364] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2063.053199] Bluetooth: hci6: command tx timeout
[ 2065.101428] Bluetooth: hci6: command tx timeout
[ 2067.148195] Bluetooth: hci6: command tx timeout
[ 2069.196074] Bluetooth: hci6: command tx timeout
[ 2079.668668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2079.670068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2079.722538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2079.723608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2080.154428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2080.461731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:18:47 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1000000000000001, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_io_uring_setup(0x4a78, &(0x7f0000000040)={0x0, 0xc31e, 0x10, 0x2, 0x2eb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

18:18:47 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:18:47 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0])
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000440)=[{&(0x7f0000000200)="021768f28a350a452a5e28e25d3ebc2a4015c66e49aca23bb81701d1276e6dd89f5697c3c04960f7b4907b9674d488111b29d2ba76e56f26a673f8e336483d596aa182d70e2bbea7321c0917e284d7fbfaae5831a748f7abc4f54e698343c52c12d0faca93d7ac2ae786bfdaa3e0086ff5aa5481abe435af", 0x78, 0x1}, {&(0x7f0000000380)="d065e3cbd317e3a10b885f63add9bad70cc59088223c5d4d8021f4b81f1eda3cd492551c6fc36fc5866b56a6f7409c05fd23a5a4abf0bf6c267f8711f04a90d86f0410ac13c5ab22662545163f00a4ba99769d38271c489903432898a137cdd1990c808d30e972db256817764d67317a00c9c1cfac9abebeb2c6b5b26dd38f72a8f63a6dd641d5a8cf9c50c823cddf7ac1c2c9d6d4a13220456da569b0d2d926a930649bcabdbdd73423ffc064c41daee6", 0xb1, 0x5}], 0x0, &(0x7f0000000480)={[{@nodots}, {@fat=@gid}, {@nodots}, {@nodots}, {@fat=@debug}, {@dots}, {@nodots}, {@dots}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<', r0}}, {@fsname={'fsname', 0x3d, '-'}}, {@appraise_type}]})
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010006000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000400", @ANYRES32=r0, @ANYBLOB="040007000000110008000500fce12d85b2f8a5f36b51d4b6aca1ed4ea00591b48b50540236cfddcd39724ac9bd41de6d31a65d4a1fda1937930cb6ca0760bcbf90864bcc92e4520d7c700d1e64f2ff05a4f834212ef0997a1f8c4f34ccae3ddef1f6971cbaeb384f04cb3244dad9840a970799aee53341b02954b5f674331c9a15a0accede98dc8e7f228d542ff7c213b50636ab9c42ef92cea80cc609a5a910f1997a4a1745b88b795930585bce72e2afe09256b400"/196, @ANYRES32, @ANYBLOB="10000400000000002000040000000000"], 0x44, 0x3)

18:18:47 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xedc0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:47 executing program 4:
r0 = msgget$private(0x0, 0x150)
msgrcv(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x86, 0x2, 0x2000)
read$ptp(0xffffffffffffffff, 0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x800)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4c3c1211f1141f48d378d110899c7b3b32c69b09a080aa5fc4b9f25e51e9751840cd49d3e526c53089b1dd3023c1cf9a0b9b062863b4bceb62dcd933313352ff90de45c3d39c24ed996ca576f7524c808e1dbe172c280500ff2bf12ba1634db0b8e7d966fb32bcfb24bdda5c7a5c78871c2a62a67c2752", @ANYRES16, @ANYRESDEC, @ANYRES64], 0x8, 0x0)

18:18:47 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfffffff6, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:47 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x0, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:18:47 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

[ 2089.235758] No source specified
[ 2089.245788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2089.245917] msdos: Unknown parameter 'mask'
[ 2089.259144] No source specified
18:18:47 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfeff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:47 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xedc000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:47 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x200)
msgsnd(r1, &(0x7f0000000000)={0x1, "a7e16406159a6d9f2996cc3f648192e52f6520c2c4688482950f"}, 0x22, 0x0)
msgget(0x3, 0x18e)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:18:47 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:47 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfffe, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:47 executing program 6:
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setresuid(0x0, r0, 0x0)
r1 = getuid()
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='nfs,dots,nodots,usefree,func=POLICY_CHECK,smackfshat=msdos\x00,euid>', @ANYRESDEC=r0, @ANYBLOB="2c7065726d69895f3e6950776374696f2cff65723cf7aa77043756e5b5ad007f7b1c7a197ee52a471d920476f41f92ad9239ba842607", @ANYRESDEC=r1, @ANYBLOB=',\x00'])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r2, 0x0)
quotactl(0x5, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)="5520abf9dc7c12478ca966157e5a1b8842fa088dba368a50f5d57b9e3d5f1551b6107263d856434ee2215a6f2e9ff36efe9f825c845e7a7db8861bb5124f77b139f4fb0525035d5761714c480392cef223826a2ce0a15e5b040deabf750fe91ed0b83dfc5cf341af31019f3f1da567df8c9c3ef56860aad8e8b0e547cdc86bb7224534c06959aeecb8944fca3cde481c00222c4546bf9c6ecc04d5cd24870c04cbf66813f96bb7d1ffa9793d107edc85e10bf33f0999c1abb4b3a09521198f8d8d8f08e1182cc743d03331b52a6004d0dd1fc793ac13c0853ad216")

[ 2089.587808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:18:57 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000020000000000000004cc5053f4754743900"/155], 0xa1, 0x3, 0x3000)

18:18:57 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:18:57 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x0, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:18:57 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:57 executing program 6:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x4c0f)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="757f0000003d30303030303030b213528f30303030c8ffffffffffffff2c636f6465706167653d3933362c007b6b3e65768151d454d0ad8084bfbcb9965df606d55433"])
rmdir(&(0x7f0000000080)='./file0\x00')

18:18:57 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x6, 0x800, 0x0, 0x0, 0x0, 0xccd3}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
readahead(r0, 0x40, 0x20)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[], 0x2f)

18:18:57 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget(0x2, 0x0)
msgsnd(r1, &(0x7f0000000000)={0x2}, 0x8, 0x0)

18:18:57 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2099.652650] msdos: Unknown parameter 'u'
[ 2099.664588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2099.670841] msdos: Unknown parameter 'u'
18:18:57 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x4, @any, 0x3b}, 0xe)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
r4 = signalfd4(r3, &(0x7f0000000180)={[0x2]}, 0x8, 0x80000)
read$ptp(r4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0xfff, 0x4)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0)
r5 = msgget$private(0x0, 0x0)
msgsnd(r5, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r5, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:18:57 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x100000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:57 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:57 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB="75cf95a8c04345e59b30303030303030303030303030303030303030302c636f6465706167653d3933362c00"])

[ 2099.831468] msdos: Unknown parameter 'uÏ•¨ÀCEå›00000000000000000000'
[ 2099.838170] msdos: Unknown parameter 'uÏ•¨ÀCEå›00000000000000000000'
18:18:58 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfeffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:58 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0xc0)
msgsnd(r1, &(0x7f0000000140)={0x3, "c5d9f88c35e4fd6ac10a29f132c9ec685019d6b9d790b227adbfc3a4ac42d5a735b14f9a7c328becb5b89a2245f907e956a0c25fcb22f9c00a2bebb94826def25db19c3984357e967dae9877ffd4f1538f9bbaf7e41c05075ed58ad41d5a8ada3212866f1181fc64a4ecda594d9f168ee3e5495724e2fcf83ab472c7f0f0a79547b84d9fa558"}, 0x8e, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000580)=""/4096)

18:18:58 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x200000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:18:58 executing program 6:
r0 = gettid()
tgkill(0x0, r0, 0x80000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
gettid()
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/183, 0xb7}], 0x3, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}], 0x60}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000700)=""/177, 0xb1}, {&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f00000008c0)=""/7, 0x7}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x2, 0x100, &(0x7f0000000a00)={0x0, 0x989680})
rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0x3b, 0x1, 0x4})
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="100100002100000125bd7000fbdbdf25ac1e0001000000000000000000000000ac1414aa0000000000000000000000004e2100064e2100050200808067000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="b96b6e000200000024000900810b00000000000000080000000000000800000000000000ff070000000000009c0011007f000001000000000000000000000000ff010000000000000000000000000001ac1414aa00000000000000000000000000000000000000000000000000000001330300000000000009f70200fe8000007ecfe8e78d262e1b94a6aee38e8ad20000000000000000000000bb0a01010100000000000000000000000020010000000000000000000000000002ffffffff000000000000000000"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c1)
r5 = getpgid(0x0)
r6 = fork()
kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
rt_sigqueueinfo(r5, 0x8, &(0x7f0000000340)={0x20, 0xfff, 0x20})
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r0, 0x6})
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x19000, &(0x7f0000000040)=ANY=[@ANYBLOB="615fedf9786b75303030303030303030303030302c6769643d00"/40, @ANYRESHEX=r3, @ANYBLOB=',\x00'])

[ 2099.991539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:18:58 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000002000000ff03000007000000ab7700000300000008000000000000008f5348b1e6c679f702d2fd5d3143bbfec232bdcb90bd3b0a8fc53553000a72a4ed95e65d0472576274764d3b8a4c40c99174b6df497832416739fbc68f9930371d0b14f87b76e0a6f85b80d60763b2d3c7977b03249b27395569b8ba6c9770d123eec8502b00db6466d6adc56ebc7a55f1a0f2c4a7655f6e582fb83f78dc02d6405fea8c9cf63c770ef5978e5139ada53d797be14b32378eb8a5535915afb7cc6199407d3cc4d66e98811e08f31bb7ffe6bc753f6987fc32600643a4387a193039bc89790de109fb471834cc148d32be3bc143c2675e8e6a24fa89f3584098ac7483e29fe429c04c285c6f85033912a7adf8a1bd3b95013f860af826ebd91b94744cc83060d51c51fc5ba32fef"], &(0x7f0000000b00), 0x1000)

18:19:08 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000048b8d0000e311"], 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f0000000100)={0x3, "a9ca7e339a6f3c2c91904973888383424347f1439a615dc1f95211a0b52ee72fd413f133a4f46c8b6f93ebeeec2e22d44f495cb262c1155a93ab01e1c3c9bbed373190f9c049a4c47e23ff373ff615f694fee43b43fd9a7594902311472cb57d5c6b0de7326139c15dcc831a8e66b1b0744552e8a94343240fe17068846d48fa0b387027f98a279a171105c7d71a6d42"}, 0x98, 0x800)

18:19:08 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540), 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:08 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x300000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:08 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000600010000000100000008000300", @ANYRES32=r1], 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r3 = msgget$private(0x0, 0x0)
msgsnd(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000005906f98a36404e478d41ca7339f6a9d74916fab371174f40c0663ab60c3cd18535cfd685a34cb3978a02d14cbfefd5f1fa820bec85e126c3ddc5743cef87ca8516e255df97d59222bea72915d16372dd0f35fa7823a3b3419b30c2e42dbc2d2e79678ef9299a4beff6449332375d73244377edc2643481b56063f1b01684a91a7d4db1a1e3e83ba278a269dfb2682a05e"], 0x8, 0x0)
r4 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r4, 0x0)
msgctl$IPC_RMID(r4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = msgget$private(0x0, 0x60)
msgctl$IPC_RMID(r5, 0x0)
msgrcv(r3, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r3, &(0x7f0000000380)={0x3, "4e1030a2d84054c6a5f57aec52ab2946ad59ac6c11262c33483e7843468f7c6265a4b40eea3f240e6e1f1a2c18ec7872f5d20e6424b8475d3015c6da37e02af6d31ff551dc902cae7d125b9fed7c7479d2081dcf3cdf4c9ea8d7fb66e6c1787e5c2c5e3aca1d9e19b28e786d35043ba4a08d0ba641d76af587642ef23d50b8341b37ae0fe8235b04e97ec534631bd26443"}, 0x99, 0x0)

18:19:08 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
rmdir(&(0x7f0000000000)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x94, 0x1, 0x7c, "32b0f1839079e89d75e85beb3717f009", "446d2a01adab9cf68fe12de783728244c0e08382b28bde5c1249bbbdd26cc354b69a1364f76605e14f2109811bc5da97c421f7f647142a7e9b48c241454ca2a861c6d67a33223c294773eea690a07b5ea47d9fcb25a1e8d98ac597aa903283849457fbdb1ea273d164ae62169686064318ed80b6a31199358881a343821db6"}, 0x94, 0x3)

18:19:08 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:19:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x2, 0x7f, 0x40, 0x0, 0x9, 0x0, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x8001}, 0x0, 0x9f, 0x2, 0x2, 0x8, 0x1b, 0x8, 0x0, 0x5, 0x0, 0x7f}, 0xffffffffffffffff, 0xc, r0, 0x3)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:19:08 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2110.347563] No source specified
[ 2110.352290] No source specified
18:19:08 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB="756d61736b3d3031303001303030303030303030303030302c636f6465706167653d3933362c000000000000"])

[ 2110.389399] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2110.392706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2110.395742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2110.428271] msdos: Bad value for 'umask'
[ 2110.432224] msdos: Bad value for 'umask'
[ 2110.442484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
18:19:08 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1f}}, './file0\x00'})
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:19:08 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x700000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:08 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:08 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000), 0x8, 0x1, 0x1000)

18:19:08 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:19:08 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f0000000000)={0x3, "c5e7cc296bd3bfd86614e1ccf51a46cad47a23fdee08360b0db7d340fcf78a8187bbe1fb621a4243a67b619baf92b2ed6b2aad0ce288424fcde76d4f1740"}, 0x46, 0x0)
msgsnd(r0, &(0x7f00000003c0)={0x3, "170bdb606898e7c3f2eb35eaf06c06c114f7486446823540eec31cde9ef78ab98cb7dc5e51c47ac2568066aa410b498c50ccaa935543b70838a0d8cd08c09d84f429a27e9f133e1b13a6f4375818fb94c1e6c24eb5fb632e303f46448c07d1027e11887ead31057f2956d43b27795cbddb2743fee6601e5b5f05c1f8904eb4671ccedb5e14516f03595e77a0febc42ac35e20d98c2b34f7e7da8f3b96e5c1c4de8d008a1e93e229e9122bc15c49fd11a93f0b36c"}, 0xbc, 0x800)
r2 = msgget(0x0, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000300)={0x0, ""/149}, 0x9d, 0x0, 0x2000)
msgctl$IPC_RMID(r2, 0x0)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000240)=""/182)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/221}, 0xe5, 0x3, 0x3000)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 2110.574797] No source specified
[ 2110.587405] No source specified
[ 2110.602095] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
18:19:08 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x800000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:08 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f64f78518f600cf852581ab"])

18:19:08 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x810000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2110.720890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2110.728587] msdos: Unknown parameter 'nod÷…ö'
[ 2110.732840] msdos: Unknown parameter 'nod÷…ö'
18:19:18 executing program 1:
r0 = msgget$private(0x0, 0x71b)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:19:18 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010d421086c15e21ea0901aae00"/146], 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:19:18 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@ctrl_frame=@bar={{}, {0x1}, @device_a, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x4}, {0xb, 0x8}}}, 0x14)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x7, @initial, @device_b}, 0x10)

18:19:18 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x900000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)=""/4, 0x4}, {&(0x7f0000000680)=""/215, 0xd7}, {&(0x7f0000000780)=""/240, 0xf0}], 0x3, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r0=>0x0}}}], 0x20}}], 0x1, 0x100, &(0x7f0000000940)={0x0, 0x989680})
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9dd1, 0x6, &(0x7f0000000500)=[{&(0x7f0000000080)="1e30e05d2e2cbb4e4452241b4d8f2bc5886d72ca3192148e7c420fb36af973290cbca8cb421e8097f0a97fc418016b227a047795c10c11c83236174bad60711fa2c44570696c73fcbb24a87511c10299ed4d1a3324a2a5d2fce4a8a0a0728b324ed845487f0f263c923098e94276557fdc0552f0348d9fc5c0561ffdaf43bff868a643f4f178a9863f4cd8b17770ba068d", 0x91, 0x9}, {&(0x7f0000000140)="575e21fab006fb8b713ea291cb43c0c6338fe90e2b3716c0464a977372681ae296f445997ec7f2f82cdce384337513b2cfab35bfd8e688425538b81a120b469ba9ac5fdc3eeb0b852b2e1a0587e72d111bd4b4b888d0e76124e930d6f7f476b76772a777ce79dd08ea48e15e66dfdb2be4a90ca8e95078cb241ce234762ce85781f443a7abc677c93a70c85e0149831de8fc877cdd6ca61fc5024b8af92aa1f21a356960489ab3f6", 0xa8, 0x79e}, {&(0x7f0000000200)="edb15f1257d7258413667aea8739d652e8c96d070917c36ce862f565e7f174a4456f771ba6ae6e771fb93626a0c6b8f1d516880d9bf768b5901888df1ed24944eb76f98a61626b3a0bf157070f2f8d8365c5312d13cb9fc3e7479f94a2a15e0f866f26d2a041e8f17fc0e9e6df99ff7ca89123cdd7a2bdc6af6f6383c32db23f76287d9062ef", 0x86, 0x4}, {&(0x7f00000002c0)="45f6da73c1eb54a1045032f96a6698957885253ea8da41ede8bbb73ce168923262ac36f99c8bfaf7f6e1e06bc9bc01650d4e9942dde2a3aaff36bd954da7c1637f67f91920f422308a098b1171f6120b977ff2fa0b81435a3d22bd4f12cfccc345ca1a1687f1cd3c2b4447ae2a2468b64a9b7c68bb8e980b1e4b08382a551bbefcaae265edb1", 0x86, 0x4}, {&(0x7f0000000380)="933539cb8cfa6e365999cd918436371af40af464348458b068ea44b26a174362d7b7be907037b6ed17f43016fbdf4b522499a85009609099d76aaa0426b1aa745dcb", 0x42, 0x8001}, {&(0x7f0000000400)="0119b9f70be944669e8507b027e1b104ee192e39ffcf102372ca9865ea08794db4a710b7e4fd03498384d23c266b3d89ca95ff45d5ed4a1ac692ce8beb31a55a2f62162e4a8bea40ecd6a720eeafd6cd5e275d480724295865f1964525d4a2bb3e407953de31d7e4fb019432c1a4d59bd6dc1941c8c3bb74332a9db8f2067c6485c3c2a5237d3caeb544dfce38f78cc8856b3cc3d7fafcdddf197fd29e58d92e6015751da51f9a1f1dbc42f336346ca0f5662d679f0a3047a2a5b68b4f3d2955c891ea39586e", 0xc6, 0x7}], 0x60404, &(0x7f0000000980)={[{@nodots}, {@nodots}, {@dots}], [{@appraise_type}, {@euid_lt={'euid<', r0}}]})

18:19:18 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:18 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 2120.419027] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2120.423728] No source specified
[ 2120.433242] loop6: detected capacity change from 0 to 128
[ 2120.444033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2120.450343] No source specified
[ 2120.464641] loop6: detected capacity change from 0 to 128
[ 2120.468159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2120.485905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:19:18 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget(0x2, 0x17)
msgrcv(r1, &(0x7f0000000240)={0x0, ""/155}, 0xa3, 0x0, 0x3000)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgrcv(r2, &(0x7f0000000140)={0x0, ""/208}, 0xd8, 0x0, 0x1800)
msgrcv(r2, &(0x7f0000000000)={0x0, ""/2}, 0xa, 0x1, 0x1000)
r3 = msgget(0x2, 0x88)
msgctl$IPC_RMID(r3, 0x0)

18:19:18 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:18 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xa00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:18 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000140)={0x1, "daa855b8b6529ef940ab96f54ce753713cd437f868861a75c59eb8471a6c62bae9a70ff6681a2be95f3cf0b58def5b4f54a8c760bbf8546fa9b941cbbacd550db5a9c350dca36b01c8718ccb1f433f3ea40332990dec2f133d6c5c3f0945"}, 0x66, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:19:18 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x7000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0)

[ 2120.644532] No source specified
[ 2120.648006] No source specified
[ 2120.681798] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
18:19:18 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:18 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="a471b56938283fc41bd592c86f4936b1cd9ff505a0f19dddfd7aa749f893bc184571f9f2495dcedf2d8b9ffc5d1646c14f17b54fa71e32ee03c258e2992868f3ab447905f0e8b761f404973b78bcb05206c45727c08ee25b49006a0d9e5ea346a881b4b8bc2c0cbc12b434da8288a97ae475833ca81d2b6a2c5e8a15131c5d9950cf1040813edaa784a76eb7fe1fd6dade6cd6b2fb7b0f616dafaf9bbfd77f716eb45f53a25c2f6a7a130cadbbda235d560e85c5515f630527bdf2f67743f204583a4e5263e0c5a543c345552f95269693e83639253df6b78f00c2173de3c37a4fa44bd46b7bab5a98b191d58b7358ff4c22cfc0a51c10f7", 0xf8, 0x44000, 0x0, 0x0)

18:19:18 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xb00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:18 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b7ea66b00f6163bc18de8bb656a00"/161], 0xa1, 0x3, 0x3000)

[ 2120.830696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2120.833893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2120.859386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2120.865669] No source specified
[ 2120.874229] No source specified
18:19:28 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0xe)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff6936e84be0e8d12d"], 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00')

18:19:28 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/61}, 0x45, 0x0, 0x1800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:19:28 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x3, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:28 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000ce1900000000000000000000000008000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000004b1e439a625a07ba000000000000"], 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000140)=""/68)

18:19:28 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:19:28 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:28 executing program 6:
syz_open_pts(0xffffffffffffffff, 0x298000)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@dots}]})

18:19:28 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x1000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2130.279555] No source specified
[ 2130.280466] No source specified
[ 2130.282224] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:19:28 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8100000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:28 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:28 executing program 4:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f0000000140)={0x3, "3c8f13bf6c6c2ea4b2299d3ebe56f2155af9c323173f3ebdfb84598a1c07b164396d2584f68afc90a4210543c81cd049b7309691a33e44b5b90df6faa22114541da21a9f05d5add72b2b715552b2b3016784269df67ff40026a63904cd86ffd63e3a206fc1902f6add61e86500232e412bcd65f43529357a77696086f454ac98ddaf749ae3a2ed08c341fade8b278d3d8aa730149dd9d03ac24cbb9e741c7f"}, 0xa7, 0x0)
msgrcv(r0, &(0x7f0000000200)={0x0, ""/130}, 0x8a, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:19:28 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x9000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:28 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2130.440346] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:19:28 executing program 6:
r0 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}], [{@smackfsroot={'smackfsroot', 0x3d, '+^-\\'}}, {@permit_directio}, {@seclabel}, {@measure}]})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setpgid(0x0, 0x0)
r4 = getegid()
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r5, 0x0, 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r6, 0x0, 0x0)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r7, 0x0, 0x0)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004300)=[{{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000d00)="f1d3a803e0431d5900ee2fe63f7dfbaaeeb697739de0f5e1a7565fde5ff23794b9d97eacc002960405a485512225725f5b1ec63f016e8deebffa0a77c3558bd5e28369af742d1bcbe19c810b992fa6fbbaa00f2472b99875a227e531ea02", 0x5e}, {&(0x7f0000000d80)="5a4a14cb246e3d969fb778ff4610aad93b84c8602042cfd1e7f9d64e7c7a39da45d15c3120f06f6ae1fc00056f72470996d20a1e56938c19989c6d9b77412ccedab487e81ca9ab46ec4efdc651b83783ecbcc74daab31e208635d494b25217952daa1b80f2d3c786a3ebfb93692af661784f2cf93581b177034bb632", 0x7c}, {&(0x7f0000000e00)="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", 0x1000}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x20, 0x20004011}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001f00)="9ec68b224fe8cfa4cdb05499a70516299e0ba6f89f7f096f99e0", 0x1a}, {&(0x7f0000001f40)="aa78e19257632f32bd2f52b291dccd1d7dfdae7660cff7775dbc81b8351de0b0d8938e3a95a8d4495071ba02ea5a3986df80cbbae641231ec993af910590ccc1af99eada78aef5d119cc1c322dd1bae83cdca1804e25eaa2e919484e851b73b32bf6fbe5e04ad81fed57765263ebb64fdd", 0x71}, {&(0x7f0000001fc0)="ac76f3d6a2754a732061184c534c8394", 0x10}], 0x3, &(0x7f0000002240)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x58, 0x20008000}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000022c0)="26e21e04a6cb763c2e97359abdcf7237c922d17c7f5f38b68f61f58f81c440ad5f77ed8dcd892081cb80bc123958f621145f1bef5c187e13e8e79ab70ba639c384a22b135dcc694f222ca46b35765caec9148eaf784b", 0x56}, {&(0x7f0000002340)="1a9dc45c1129bab0e97556e25599ffbd3530ceff5850926e2fb8804b1d878bdcda5b6b4b12853cdd6fd3c6298858c0f6cdcc31a10581c07094becc15c8f298419bc51592a844dbe780a953acfc93f94b50d183a04d2eee47ca654ba94755b59a681a0916d8c37a429ba259de934096681f6669926c364bb863a67c000cfe6fb0ad2a3f5554ad5a19", 0x88}, {&(0x7f0000002400)="cb15da755c5ad1ab4d3aed02c673dd5f3b19c37809b7b2a4cea971cd649642435edef591722c6c004f4900b055e9365912a7dcd072787e15beff6b7878df5fcfe1c288579b1eec81f4b5d1842f91ad85fb98fd432dbb7c6d8dcbb12a9e7c9ab01a8d1c5fb9bd2d5cf4c9cc2faa750b75965484ad204762414434696f52ac8c4409bd697b8473abdf8aa1148e023c8e7491077a1e5199df0a555eba69ea6bbcbbabec2f122d879127f4690da110672eb7261518b16547bc7f901b04ee17d4556765bfd5580eba86cad70a8ed008c4088eeff786761bfd78ef59", 0xd9}], 0x3, &(0x7f0000002540)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x40000c4}}, {{&(0x7f0000002580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002600)="9017684db91108fe9eb0d8cd4bd0e6d8f1e3a27bd654702a2e4e14862cc3e33f967e08b009b4cb46344160c4781100d466447a39dcd433d39e12962fe4", 0x3d}, {&(0x7f00000026c0)="39aa2e27c14d4fc3b19373d5a7808d9e928ec9e3603a95d7162f2a844e1e2223c08a4e038659865c54630208cf49db5eb1e4154a2df6b47860a9ff726a0a7fc110f78e42f14bd9b473150eda280031c20389a78a84f9dc793c661a65ecd489b1cd31a4d03cd904f814541b171a", 0x6d}, {&(0x7f0000002740)="c6bc5ec190b4e66e632e9b9aa16c94bfbe26ffe1228940e13146018d511ebb023d2e4dc3186423f09746f09669500a6f5ee7496fad4802bbddf38eee1a082546303841cb7efc2d641d95cf5b35c50ca5091335bc3613ea35abe7b0e29530f00a070b90fba0", 0x65}], 0x3, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r7, r5]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r2}}}], 0x150, 0x4000}}, {{&(0x7f0000002cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002d40)="fe487ccb329ccc8d148d16a77f5f72cd5bb2bbb21a33865991b4f59a66878580195091e3619e7fa60bb1ea9db6277e173c8b08a203788903b70c1b392355942896f70f03", 0x44}, {&(0x7f0000002dc0)="1db173baf3ecee8db8ffffbdad7ac3d5178dcb4e848947a90a9c4d1954bbf83db4c0588454289d82ef3c5b832b25ad7d681065a1f0ce905efa152f37d6cdac07cfc742adf7d055402c99893b77d94e8466e422fa474b7ce463ffad348eaa6fd3e709a83649f7ac243ec53b1c44f28ab7192c5320531c9e232d26805ce19b65b943fc99fb1db42e3bffea61d63d9d0a0b8b8573a4f437a3b7a84adf622b15b49ab86f52f7450cfb220ed6fd6f822293fc213a53ca7f4d934b23707e04d5daa36659df6d", 0xc3}, {&(0x7f0000002ec0)="dc0cfb03573a4bf2d9397012536ff7e28494e67e9ba27831294bf60b4e9027f3a5c2c59e8c0a06494c70186c674f4df362ecb238c96acb6bb1b73e9ff32468212bb99a312fc1022c4c4abe3874fbf59e1ba28232d75b5ef672f745d84bc1a202c18ce6887363a81e7a3c9e0e76ac56de1e1605c8a723df97c078f4e8d8f9b8897933b462bba8c1a696099be678114aa85d", 0x91}, {&(0x7f0000002f80)="f456178cebf85e18d0c05b145c75db722b8a5c25c649287a804da247bd0d07a9276b3c3df2bf67438fb20e0f0a0079e514fbbf53b4dff2f5126c39abd1a078fb53789a69080dc979a4a414e79a02ebd11987d4ceb96ca73b90224e66bebbdac92c7955f1c00915506a93a7182a3bc59ffa880e7c0701d26b2e6e5ecee1f2d86af11601cd10d255fb6c00b45a83b17814849922785827ff149e96a012009b264208232116819385bf9bff3caf699ceceadc07d04854f7b5b50e90d433ee70b7e2adfaf49ff8d95e4b4f1c7a5411e9fe35ed8a76927ccc88facde6272a8842a6361a57c4469d204850f813627e5d365290d049275820c4300103111c", 0xfb}], 0x4, &(0x7f00000030c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c1783c04a00000001000000020000002c97a0f7cee105e9f4e0f2de5c0400393643ea4868", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], 0xa0, 0x80}}], 0x5, 0x8000)
setresuid(0x0, r3, 0x0)
r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r9, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000580)="d02258a604579a72aa7b9fdd6327d66e8c2ca1838237b6c3a7d407d423b7fa4bc7c2bb1cbd260353e0378f12d77f4d4adcaaf4f6c6d1e826a633754c6d6da4733e2863c1741bd8320fdfaf64237a16a36ce29d48ca8341f130124e2ac348696ad5d0b2b7f2dab68968ac36ef09e05b8d", 0x70}, {&(0x7f0000000600)="8fe6b08142da8d7f7f0476e4f78a64c87c435480db36f1c701c14257fe3560dd0371926979a1302bf52357b798073633888c5a9ca5ac1bb7aef0743f6736ab020664ef88df1fdeb2681c0bb7e8b2bb7d4cd5689990cfda8a730a25bfea8fd405917bb071ffd167965e7325aeedc497a703fa75d8cf2e748483fbeb99c6b42044c3b6970890fec5dfaa7cc52a199df072a01f158522e668851fd1491aa358a143f7fcf1d1998814130f505a3581c0e95ebafecd78f8eed0f473fceac0132f920f9035539ea0758af8f6bd9e01a7521fe32ead875b0095d79b6a247433699ef06f", 0xe0}, {&(0x7f0000000700)="e4dd813e3a9ef21d1b5f6918bf728f6c66f9e391de5ea75f1013f5d9321bebeca4afb365d022516ad8f336bfcc58b57fc14a9439c922780afaced770095056e7889c187f6eefc84758cd7d5665c9b7d7904f", 0x52}, {&(0x7f0000000780)="329b758f47eee549e9117c0b41280dbfd93c690df7c7504336eedb9bd67430f7103b6ef5afb656eb4dbe9eac16f2941b9ba71424bd815ce8bd19ca34dfd1a12d3f641888f70bf3d4525f665de7d82b1f84b1649e3365e0bfeacee9ca23e9ceca6e5e178b3a30c6bdcd52fda2a2059e914ee80c0c632d5d12ca19c07c5cb892410a42e033ecaf9d1f33bba6ae461792", 0x8f}, {&(0x7f0000000840)="3c97af23999444976fe63ff308ae32698113835fd6fc43f84c3ff954d443b2", 0x1f}, {&(0x7f0000000880)="048cf697741196c58f58201b9dc5c88ca88b0a9c42aa45300ecdeb660116a1aad7d6b0f5f042ef3f85e74278a7a19eb5b49e2ab592299da6687d098636901d7d38f63a327e6b2f1a977cc7e3916adeeac4b01a9e304cf8c8c161e5a7537b05e06518a19d3cc4c70574ed5ffdc9ba98f64401a7df2ae76f1e7663f4b0fb87206680137ed32fa23f7ae208ba96dddefe12591e5f60594f8344d510fd9750961cb1902d3e7b60adfb0b0a038fd90ff8f0cbd4de67e624d956c9ea019b37e67916003df5ad129236eb8e717c90119c74a8f69c3733ef8e7b8bbf4ec34ef0b530f1cdf88357a0", 0xe4}, {&(0x7f0000000980)="76ddba9c16ec69b8034bcf685c4bdc9f00e404d3b22bf7939ab073d2761c587e6e2661daf315fbdb983da5cfee9466e22f4ea46c306cf8fb4a4d91eac59a0f223e1edfc25f63ecd6b5da6ae5412a43e18fb510e0383646a34607d38159621a849d3b3f1874aaabc4871b2966f42ed0500c9bd6b666d5af863e54dc6f8c2e9cb3f2ac5240444eb28b18d63e4abc88286977b8da", 0x93}, {&(0x7f0000000a40)="34928c2c04cdff94a9a8bab2af2c16290581ee3df11ccf2a172adb926276aa5e2536cc8fb083291731e0d2da52a03032c626639f7576288cddb83c3417c368157905e89324229ed5ff752d3d1bf9", 0x4e}, {&(0x7f0000000ac0)="6fc5b694e1fbd130e3028106982bb8b0996578f820f10859af6b91f0f18e55cdb9e8d9eb57a90080067b4e08d920c75008ec682c8f522b34a7c3e9b3cf41114283cecb77309fc91afb2074c4f329dc21073ec69ab8", 0x55}], 0x9, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18, 0x44}, 0x881)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000100)="e3cbe607b8f6fdff8bdbfa71378048429ce185b04154c3924f215a38f000558f1089945f6fb18c80a902e9bfc4ab75b549f0f4c33ecad5a1da4c54b1defcd5f37722f9c6da6c182f57ec7cf4d1b025db79c188295960e206d672c8169ccb33b850c36f09ff60c56180884865c99337894f63a1c54726fe32a678a28c21edd01735350ec3ea26e653726077a46f296254251c55de80881f41962761d299ed1c92f0802be62738d1bdc721aa181590cd59a88037515c51f0a143d50449b34ee42a5bffbed574346ebbe40cdda9eeab3a69b48ccfd7c51749", 0xd7, 0xffffffffffff0001}, {&(0x7f0000000200)="69cafacc5d19edd82b9f367cd553f5c924b1fc9802903d40f9b2ae50f58dd0d6fa480b7379a71d598bcb55a2d5ba9aca2d28b5e6e6819dfce8f141328797fe9243ffb79e45171b74e94ac32b9b44ce9500724bc063b623bb21bf9a11ca6fcddd097ed61f88cb3faf79abf7f7867d8aab344f0582ed204c09da75266fb626a91821dfb49386be6d1cea8e26b0ed9b43f9d10149b1840733187ea81e40a8000d3c4adfb026", 0xa4, 0xffffffffffffff1b}, {&(0x7f00000002c0)="2f6bd8923e2e643af3012d3b9a01c537e71a767cb8e3a74612380e6a53d7f2276ae45461f08b6afc1713f6b7d1afa9790393cdbd2d08eb51b2b880b8c7c402f22fffc77b692f0de6ff90707f35a93bce092a5aa9e0cf2a4db482ac59fbe64eba23c14d058921b15e6100f2b96519a490c08b7eafffd6056e6f2f9901d24facc75376860f9774544076fb9cfae645811c444eb4826fc72cb29344a86de93af8c5c8", 0xa1, 0x80}, {&(0x7f0000000380)="bc6d7ba56bfb315852d55805", 0xc, 0x8}], 0x0, &(0x7f0000000440)={[{@nodots}, {@fat=@errors_remount}, {@dots}, {@dots}, {@fat=@nfs}, {@dots}, {@nodots}, {@fat=@showexec}, {@nodots}], [{@uid_lt={'uid<', r1}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r3}}]})

18:19:28 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0))
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r4, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x68ede80bef46fbc6, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4, @ANYRES64=r2], 0x2f)

18:19:28 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xa000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2130.515706] msdos: Unknown parameter 'smackfsroot'
[ 2130.579329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2130.582727] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2130.917610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:19:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x2010000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:37 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:37 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddca23a4ff08451cbfde0a11702368a0342bec2fd09bbfc7b589c1c097ab9bc5496bcb51011fec6b60e62a413bfa33538ef3f245f525b21803862f43d8360d83e2019c8fe54937a082c7ef80a0f40306439fd0a0987219"], 0xa1, 0x3, 0x3000)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000015c0)=""/4096)
msgsnd(r1, &(0x7f00000045c0)=ANY=[@ANYBLOB="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"], 0x1008, 0x800)
msgrcv(r1, &(0x7f0000000240)={0x0, ""/212}, 0xdc, 0x0, 0x800)
r2 = msgget$private(0x0, 0x100)
msgsnd(r2, &(0x7f0000000000), 0x8, 0x800)
r3 = msgget$private(0x0, 0x238)
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f00000025c0)=""/4096)
msgrcv(r3, &(0x7f0000000140)={0x0, ""/220}, 0xe4, 0x0, 0x1800)
r4 = msgget(0x1, 0x566)
r5 = msgget(0x0, 0x456)
msgctl$IPC_STAT(r5, 0x2, &(0x7f00000035c0)=""/4096)
msgsnd(r4, &(0x7f0000000040)={0x2, "dd1d994f643e6d77cff7454640c86174cf19acd014cd418f690321d21d9c6d662d034bada43c"}, 0x2e, 0x0)

18:19:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
fstatfs(r0, &(0x7f0000000040)=""/182)

18:19:37 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3}}, './file0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20100)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r4, 0x0, 0x0)
r5 = syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x40, 0x5, &(0x7f0000001580)=[{&(0x7f0000000340)="805a9f", 0x3, 0x7}, {&(0x7f0000000380)="f2ab5d5674e6843f569148be5351f52c0a193e5d77d5a9beeb56064bbf5f3774f429ee6c4e79cceb69078bab5558b909e0adf3f333543f91331b32e443e8568e18dc3b01d04a697e8fc5f4dfca9598374941fe7ebe5938afcc2dbae897fb7f9f6126737b71392d44d0e0aaa8a6aee0896bca54c1f4e2f4e9126e3056738ed5f9ee1c732ced8f3720bdb435dc2c53809aa588efc8a96c49fcd6a7eef4f5d032448d1d6d5ad137455d41d63bec6203fc4d533f7c2c1d47eb6688b0844cec550075e185fc8cca01999c10353c86c6a9f8a1e2729563067f13d1a1878f7be6e98d779c3ac9ab7a39c0877392ea0418bda14f63bf8b52534d", 0xf6, 0x100000001}, {&(0x7f0000000480)="fbfd558ed2083be4922f4eb478a4e82c2e6cea", 0x13}, {&(0x7f00000004c0)="7bb5751e07ec1efc82648be8ce2e3e581475314b684248ac3fd58e7735389a3f738d92d7f34d7ec9af77d5c5ff0a36eb0f59a14e24c0f86981c3a8bb4b177359a08930c475bbcc80021495652c35dd3e839dae2e54e2caa6308c387753562bd29374bb7b1e03ab7a4dad30ae31045d834c6ce65e63309a2fb593b2eb983b8cc544544041347b048b0a066fe2be135cc03c4b5610c735c17750d234e312d1305739019a59204216caf03a9370a1862959d858ce4ff9d269d38196cf5d8ec0858f89790ebe4ffcfffff4414818247fccdd9983a0753c05bbae1f8b2bea58f5907c78da8f5246f648d712402d8ca45ff21291051193cb84a75d625261554ccf8793b44b9a7ae240a7884095fafdd636fee3410cab2493b8bb328dec6fa01a3d0d09805d8b839c2bc88f7eeebe9a898026003c1be560c4ba2bc89bee59d84659aa470de030c0061ab3a3c7d8378e408a6e05a25fdc82baa1c6e5bf5f8c6a0feb203444ce5c0d66c8d7f4959ddbb2443ebf325d3fc9143428e3586d40e084eec33878b631afcfb5f149776bb664fd5517ca52ba231ed6d96cc5458a88c5c91b6ee08a7b25e2518f6796e8eacb446d1056a11002e1a7483aa9aee01eb12e75658b98978a2ecb5c24f3c18647ae835e94af7d39c465a6613ee9a187efbdebb461205673cc8d7871a78192d91c7a5c6230b53667b7653c924f934a87543f5e74770be7a396ddf2679340662d59ef1c63efe8e0bccf3a11437383221a1ea49b7a10a7d88673bcf395b10a54f5fc3866a860a2b1a0f385754925ec8e881bd0410ba3248e084d6d96a673bfb880566ef695bdd989f8fb858518ed34879d6439cca0ee4c43e9ba177de46fd89e48494b485b984d4335a9761ac450ae7517ca231410ebdf7e33c0f016bc62b2f193d04305df8e25ae47d15780d390ad5bca3a1371af14c9706adbebe79391a6ecc7591fedf1fef9ac6327295437345a0ec774234397c33c293484bd5cc64be524fb8d4e606079c20fe503708d2f8dbf22761af9991c992175c28d05a6dadc4275ac8e5fa0aac8bee193be229d40a668f9e2ac505e6f34600d6f6951bf5cd5655d3ac2e7af00faa065c0fb642ceb3afd13e8c3284cab2374786936ddf861407283175b66bcc0f9dc85710a1331309a6db974812722bf9ef11f297a83d8bb406ec4a1c9485ce66a9636200d5e01612b1b1c1bd3b7c34264446c3d4495ff675994bdc7335e36a3d7ed2f84f6663c109c2a0b2b34b8eb6398a657c49235f9b7f0193ef30588bd9e9011dfba4ea650da778d7a8c81291c4c39386cbc28011886ee435123a372a2b23a83ce12c9b86da134578bac27e689fcdc1f2df0328337baff0c4ea3644fd688d5826e86744dd191ee2f3e923b6dd34f24b23ac516b2404221d6368e2c7ff7ef33647330e5acdc8047a187ff345328bb18a8485db8a1742da73c51e3aef0bd6ec6d5700f511099f90684467cecf05c148b9337efeec7c151defb845b964687e15ba0ad3ccedc3e374be2fa72d4461a1ee1504f51fe8384d9b12d47d6efdd8a5275d559d68fb616274f8af518e027bcd4f15239cdfeffc695a29148760aef1ab22b45003b7756d973eb7baedb6ccfd8474aaf74a241e9fbed1bf12008649b614b054a464a4a087f1ea47ea159c4479461c21f1a2c28e44cc4992f0ed1fa78bfda25c2316841ad1a05ba75e1b55d6f1291fe7d6d882a469cdc7ad2a0d4f77041224a2054d6664c488868742318c67960c16754b52f768a0a3444dfc20ed5414d6175d2fa0c1d9686d0f07da171a19e2e0bb8a3ce4e1bcd3f6d263369e11e224526b4c40b6f870cd8a888b503c507f28781aaef0af4cdadd7e5df2a7fd4cb4d51d6d69a783b5f7bf64f1001729f5530622102d0623b4274b71b79c08e88d175f1e2dcc3e40e739cc32a42aa0ff3274d4cbeb38245c2284e13eb8dacc5b7ff9027b674561235312beb0193b6790c9f569b3e27a3ae371970b71ae56e930a41288fd223cf207eb67319965ad565a12f865aff3d2474c0cd22c4bf8d68206aa1212efff7f83f278b294678dfb64be188bebb241e92ff75fe4115739a783d14149413ea7e2e0263ee6757380786fed58de2d3d9c8a1e4e70c600439a2a76829a18417f1d3460e04d5c76481c1be6c4438f28d8799e18f220d351d751341a044e44451698f86b69807886f74c5b1e090c7a81f2245e2b53ef3bfc6d8b5d7596815de7a5d0419757e429f3fc5151ebcbb429e9c758811608eed9fbe1725478f9e1e4c1f9585750048e71ef4febc01c0c3dcfa31098b24219cafe7ca6b67938ebde3e5bc1293239296d3c247196fd429b1a85ca5b349ac4601fcf37cc9fc181110522637f6dfd5e07c1457a702fce0e168515c47712373201f013b4ccbc3a1ab557fbad9d0d496fb0376e34a134a828001925df51f5131c53d2752bfe809282d55d1a371e6691fcd77cbd8b500ef4953a9e3eddb5d99f3d1444dea547229278e6270ee2ed8230eec2ff08b7fa8b744002c7035e5d910ed7337e8228bfeb1d09066bcf7ccb349ca4ad1d0283bd8eaf4f7feb4f7d54fe7fc0fe1dfa364ea476586d70009ca69429ab91c8a3c482f4dd9ef1fe1769fe2b1ba49ec084cd383a4d82c92fc90ff1148831d7d257470ae94c7b9313d4d58d83954c41b16278c1b3226e3dfe52120e6ce9794a8a9889052206a5995af6b6667029d185f44aaa82743efa9f4fefa337b4ec2e7a67df2428dcb6eb76640b54839c7421023f1cb7221c38b68b3dd423e2334078294bbc5658f75d295d2a2cb788d521a5824518acfd8c00f3a8091ba1469766466f7681253529e8334ccab6ce1988a1756e6e883f29b6f835494d173c0ff2dba7187b76780ae478fc8bee9cbee6bfd98ceba52b44b0c10d8afa14d9e34dcd25015fe602f9a6bb5fcb11825781beb4549404813e59bd65027090c92c7e1547ee95ffe4836dc6b70453b13b9d3e2920b2782c57d8e75ead6b50291a3f8677329bfbe1fb36dce9442111c64858a1799f3d7a62bb342e983ef350c9d758eb7e75ef0edcba4859b51cc13b6ab87044466c884d588687061452979d26e732ac86a80771c5bfe836fbd4500aaeb939b6fbc8dae51d5463b0a68d45a0dd6b2604bcdafc88af841e6ca2f23844e45ad0e4bca4855a4317c8630cc22049078b75fde0cb0e4b02be699a33fade9c0e3dd366e5e16bd6563ebe5dc506bb09387f3e363c06d6b936a3e9085ef7b50eba5f019e5e3734dd973c204324350f2e44778c39bc301f89b459e9cc7958f91d941ff43be860e978e3d502017a494e35183bc965f840b13c10b20c8e58b1fa3d1edf96e257b474f2dade89da80593ffa8ab02e8ac06a0f8567251fc362d2ed7e273c688d278619df6a7413f6c7f64d278d95c513e60643da97653ee1ad478e733c0944bde9ee36ed2cc6e096fe3b753eab7b4516e860181a05fc4b0a0ae1e1999b4e4130d7924ca6425a7d10614957293a77b92adb83faa2c7649b6e99e2f8d8c4a240a38852273e3a020ce01fd5506633367cdf41a61dcfe4dba0cd851377c9940e41dc6e0aac943f4d68ec0e72e56ddbfde10b2bc20fd63e2552d72a8be2216d43c3b1d2a027e8e8536b1b1497ae403c9e82f3c19eaf5e295392893a816e5c58713f150eedd5a1deccf6d7587a4ca126bfb14ad35ea748ff750a373b627c8affdef9d2ee99b62faa98e1363550e7338a360b96e5235b9d6e514694cf0955bbe9177f153a99e6fb2a8269c094705dd792f12fb65a4c8779b57d6dcaa227b16eb9d51773d84aaa486bc5befc46afb82f3c58876a05c87436c1b034b75e028f266a48b97e47aae83461eee399a776321aa3dac4c873739e2e9179375664825b2d71832922ca090e5d6dfb9323ad9d33b2b02d9dbf297750f3e8826bb1fce100cb1eb38ab34bd9e366466be1b5202cb0aeb0d6bac884658c6244278454c06e8d942705a4ecc3f6b71d2a91e60964702ccf9c9348809ccf28d76d06b01e1d4cec929b0d734f9846f8e275e1b69f5b6aca65e7de6f2fd01d38e85038572ac237065adefa26973c3f250d77adc2df4de66bb50a3e1535d9c552fcd393a1402dfa5f91928bc459de1a00f2d99e946ad9ce379a3375413b454a23ab45045ee3198d8df1e7872d182733c56b4ec78ed813e05cd99a733b0fc48976bb0a685417ae40ecc6fec33adf1e8abb5f055b8ac5108e0d09e698c379d847204f5981a2567c84e459471c67ec4e8d430892a5700f4cb1b9d8c336a70f390de395c29ced406b3c107fcbf4db779d50648dcad91969fd721fac3653ca632353e3f9629165eca711c64bed0217826ac10bceccc137f5ae1787b81bd0307060cea97e81c5f08fec5d58f171ed46d0d2b3fd62d979e6cfe36db31fc907ecc4e5b616edce26af4ba2c3246e7429bacd3a7ca17835c92465adb794e248c00552693c055332da84fd5b2017d8f8ddefe7e601ae4b403eaec5e7cc3a9c20158f85f87d782a566c17ceec382a801b628a40192aebf2684bebb75d662ea4b1a8d1f066de8cb4d0490eba4a907b5ca8944629a98aa91153fb9e99689574670d0a6a20027a1829a04bf049ce6649e62155be0e13cf425ac1c34236c6da5c775a76d2b238c5f6f885f07012270e2063bddaba7f49d3564f6b718933f0235b4cc8535ee1301187363dff80676c7ca889f4ffc2020e0b9855d8463b0d52d92c6a26b1ca9b05f8efad47f417ac880935093b35030a896f1c077a24f9ae2d2010191f0fac605833a7e5f5453be3a0e438c1c353cb289ed91c5d49bfdbdf686371d5452ef23f32b6eef59fba2de4d42b5bbbf7edacc95920593ff518e3e97d87ffa47c415e7cb71ed91b52005cbc12c46ec599a35517dcf16fee0c1cfb7339b6ae126e7a925a5d52034c3acf66bdee63b10daee8400e3f9bdc0462a3184c90b645758acdda2fef0c877cb5054bcc83c82706f2c154383a036cf1b844b6ca17f6007d6b6290f348476a876f20a66bc454cc440e878ef9f5fe3145c004d8840283d7bad6f8ea8ef8c09e50b7bf993774dcfa4a1003327d6bfb709c91c8b490e579868f12b869aa592e4ae1d78a9ca792373273868eae091849018242b7f3645e31e1f83fd2444c086d04dea4576564da3d9fec1dfa8749c0bcc172bf0eaf2965c0907f259db6ee8c82c27eeebf9c72f13ebf6ed75ca15cf04e85abb6d7afcc0c6bd3679c386e0d98029eeaf5e5a8c046d6796191c3123120b481b28538d03029c5e427dd86783adde3df3e04bb58ae466e15123c1947ccd70eca39056f2514657355f9cda43ab94a44ff1eeee790737ca89f3e436aa5b0219d47d7bb53cb2398ce54572c72475cb5a23dc35dd003a30242861befe5b2aa2e3449d2c34ad803c1f3097dfcd087f5c872a3018ecebf13148dd0805f1d129409a1e1f24c5648f1ccf943f7447a2334e7841520d8821282f72f6fa7e4c0b68d79ab891ca519c16371febe9cea6940d6df1f418782c2da2a727e959fd2fa518e2f6ebc60503d8b5598257a683f6cdbc76b57e2ff623f661b961e4a856ee7afb4ea14d8aac519ccff5c2da8d610a1e7b755efebdd9fce7437d541651e9caf32e77ca40a190fef83c5f056ef88713e236a74d89a76f7b12c81245287b77b98af1703ea4128ede09ac101b8335a413e487a83b5f459e33343f93fc13f4dd77a7d83d9a374e437c2c11dfb6c5d0b7fa1e76ccf0aa899d8080fddf7f783ee0a719a244e159039d059534d59b054e49672401ffc218084923a08b6677300b8663ceeb791a48705b4a", 0x1000, 0x400}, {&(0x7f00000014c0)="d0190812e96f78812dcb9f40036c8a8b26d485475dd659f5c3a7907accb1a75c40ec4e432e83d5b7595c84e32bd14795336c50055018c5b46ecae5a397c88cd795a5ebdbf742fe9650032827f8a6b71ea47b2dbe474c826c05b852c9d6d4dd89208e33506a02561c15f369e912f54beab0ff057623e859332d269b749a4f0d0eb4b547182be7075546df39042fd82f877e427364", 0x94, 0x40}], 0x0, &(0x7f0000001600)={[{}, {'$*'}, {']}!'}, {')\\-('}], [{@euid_gt={'euid>', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fowner_lt}, {@uid_lt={'uid<', 0xee00}}]})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001680), 0x400d40, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000001800), 0xe080, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000001840), 0x8000, 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="9024b0f6fd7489d9c66ab0117982ae1515ecaa02fc01057cafd430fdf3c207d27a38fe455498a0dbba92e18c97e6fd44be4cce22f9e032d0cfe3ef4880c45a9fd6030e9e47865984349faa5044e8305fe57e05e6c0638e76dd0630288cba302fb57916410f82ac30ce1e705712d9ef168351dc4ff3db0c763f", 0x79}, {&(0x7f0000000140)="6dfbf508137e05743ef88e4e77929b3bf8879ef2086b259ef6ffe7b2215261dc8409fdd8fbf8abc85c983de7e1437ffce1e2784afeb580b570ca36bf7a51df1cae626d3815a97f89b96ed993e427b88d8bd8259deb9ab039adff15828fcaec1cf597b5019eabe8a78013bc288ce136545bf693bbc5409575c837c8721910351696506cc609892cd98a4127adad764dd8fc1af4438806a3e251997f1984d08af9629b6f7afbba5650c1374e6f21b78a9ed067ebd8025c2f0c02c98e3aab28bd8e0855686311a4c2b2e8aa7c9069ed01b3709d0e80da887865a22d886225a9d0cfc725a3f5c95592462d8103b9555f888f5b83fa902b036c9cdd", 0xf9}], 0x2, &(0x7f0000001700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, r7, r8]}}], 0x98, 0x11}, 0x20)
fallocate(0xffffffffffffffff, 0x21, 0x4, 0x100000000)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:19:37 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xb000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:37 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/205}, 0xd5, 0x3, 0x1800)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:19:37 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 2139.431906] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2139.436705] loop6: detected capacity change from 0 to 264192
[ 2139.442915] nfs4: Unknown parameter '$*'
[ 2139.454363] No source specified
[ 2139.461916] loop6: detected capacity change from 0 to 264192
[ 2139.470794] nfs4: Unknown parameter '$*'
18:19:37 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x10000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:37 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x4000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2139.488007] No source specified
[ 2139.501865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:19:37 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000000)=ANY=[], 0x86, 0x2, 0x800)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/143}, 0x97, 0x3, 0x3000)
r2 = msgget$private(0x0, 0x400)
msgsnd(r2, &(0x7f0000000000)={0x3, "6036e9f6f11f15f71f0c8b9230ed2c29c4e2b9ae0165d32fd12376df08959765c0c08ba62a364c91c6cc26fe14075add3f8a5e7da38fe43230904ace8637181df27a2dcf2f8d383f85c7bd2cbce0fa30b8bd6d4ab0a7d14bd77102da5cd551e1b60fa138baacfd484a0ff382fc331d25b2540286127bfb0ec531f7333b3644cc06fe1bf5930cf0da03601d2c977427442576d470d2ca"}, 0x9e, 0x0)

18:19:37 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

[ 2139.550432] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:19:37 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000280)={0x16})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10085, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '936'}}, {@cachetag={'cachetag', 0x3d, 'umask'}}, {@access_uid={'access', 0x3d, r1}}, {@aname={'aname', 0x3d, '+@%+(++!\xf0%\'!@'}}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffff}}]}})

18:19:37 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x20000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2139.597178] No source specified
[ 2139.601661] 9pnet_fd: Insufficient options for proto=fd
[ 2139.607974] No source specified
[ 2139.611888] 9pnet_fd: Insufficient options for proto=fd
18:19:37 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756d61f045d4ad86c1ab0ebb665af8a54b6aef736b3d3030302430303030303030303030301d0dc75c303030303030302d0ef46b7187bf65800b278a1e25431fbcb025bcd804f7a135eafff16bc5b563ceb2825b69669f45ed6e46cafe26a0bea0d028201d7ec560b3f2c6a47f21a00f0700000000000000dcbda527e88405c548965d149d48c94f4012af0500000003eaf113d372ec6dc34c4178f19d3d6ece263ee9dafadacef3e2ca33da88f48fd4b779520fe3d7031d6842eba2aec51d1ee8fc5f23"])

[ 2139.654584] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:19:37 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:37 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x20100000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2139.708114] msdos: Unknown parameter 'umaðEÔ­†Á«»fZø¥Kjïsk'
[ 2139.714823] msdos: Unknown parameter 'umaðEÔ­†Á«»fZø¥Kjïsk'
18:19:37 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
r1 = msgget$private(0x0, 0x454)
msgsnd(r1, &(0x7f0000000000)={0x3, "51f15c3df96094079b045a5c0cfe85fba29376d76a73b5c246114872ff"}, 0x25, 0x0)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgrcv(r2, &(0x7f0000000140)={0x0, ""/53}, 0x3d, 0x1, 0x2000)

18:19:37 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(0x0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

[ 2139.835638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:19:48 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(0x0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:48 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f69301aa7034c5d09bd93430f1c094b8b4831bc69e3e01490174ead6459fdd01f05cecd57a8c1fde1619322c3cb11e7516240d5ac393af24bb781504aa1f027e54e852f8fb8dc6c34284a292ea1c214003f824db873f79e069cce602b6c9c42f1685125bc862ea7a20a40049678b34e4c6b1f6e61f57e8c7d8cf352195288d56c54934b"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:19:48 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x8cffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:48 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1ff}}, './file0\x00'})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
syz_open_procfs$userns(r1, &(0x7f0000000100))
r2 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[], [{@dont_appraise}]})
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
move_mount(r3, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00', 0x1)

18:19:48 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:19:48 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x40000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:48 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x6000)

18:19:48 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:19:48 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgget(0x2, 0x0)

[ 2150.405656] msdos: Unknown parameter 'dont_appraise'
[ 2150.416041] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2150.425274] msdos: Unknown parameter 'dont_appraise'
[ 2150.433804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:19:48 executing program 6:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000080)={{r0}, 0x0, 0x4ccb51f6d52e5101, @inherit={0x58, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x9, {0x3, 0x5, 0x2, 0xfffffffffffff0cd, 0x4}, [0x4, 0x1]}}, @name="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"})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000001080))
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB="756d61736b3d30303030303030306465706167653d3933a0f9f3708003aad10000002dcbe1e70000"])

[ 2150.491850] msdos: Bad value for 'umask'
18:19:48 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8cffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2150.504731] msdos: Bad value for 'umask'
18:19:48 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:48 executing program 1:
r0 = msgget$private(0x0, 0xec)
msgsnd(r0, &(0x7f0000000100)={0x0, "912877c61d5163c917699d8b01f86a21de403f105fd748211bc4d9502e96157a8f383abb6865164a"}, 0x30, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/246}, 0xfe, 0x2, 0x2000)
msgget$private(0x0, 0x106)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, &(0x7f0000000040)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/178)
r2 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgsnd(r2, &(0x7f0000000000)={0x2}, 0x8, 0x800)
r3 = msgget(0x0, 0x0)
msgget$private(0x0, 0x28)
msgctl$IPC_RMID(r3, 0x0)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000300)=""/176)

18:19:48 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4950}, 0x4000000)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r1, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:19:48 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/144, 0x90)

[ 2150.607459] No source specified
[ 2150.611454] No source specified
18:19:48 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xfeff000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2150.747343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:19:49 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xffff000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:49 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32])

18:19:49 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:19:49 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:19:49 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(0x0, &(0x7f0000000300)={0x3, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:19:49 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000001180)={0x0, "a7227a2e169e024a64e95ca745b57f6c0e00bc6c790797a346522b2979bfcb3a3e1bde09ffe7dfa41e00b47a68e74c65a610dd1c74fb4a7983701ab0f3a4f41ecf89637e82323c529ab95e958f08d7281956f9ac7ca2f32aa36aea0895c9e3ed5ff4155a5ee7d8e86fa8e3bdcc51390f94fc241b6ca0a44bec96decfdfcd57bd9550c77898551e532e17efb3883882b33e45c92e7ad80146069b977bfab99d9da297efa6368c20e28a94edd9c120c93f6b9f8026b9923f857bcf648451eb"}, 0xc6, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/54}, 0x3e, 0x2, 0x0)
msgget(0x1, 0xa4)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r1, &(0x7f0000000140)={0x0, "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"}, 0x1008, 0x800)

[ 2151.277896] msdos: Unknown parameter '18446744073709551615ÿÿÿÿ'
[ 2151.296209] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2151.298679] msdos: Unknown parameter '18446744073709551615ÿÿÿÿ'
[ 2153.179845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2153.185672] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2153.187718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2153.192216] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2153.195352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2155.276110] Bluetooth: hci6: command tx timeout
[ 2157.324898] Bluetooth: hci6: command tx timeout
[ 2159.373053] Bluetooth: hci6: command tx timeout
[ 2161.420210] Bluetooth: hci6: command tx timeout
[ 2171.292836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2171.294710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2171.362668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2171.363893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2171.670516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:20:20 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001020000180000006276c203457d9331fedda513e70607621d1edef682027546e9fc02a7e8fab3ed2001311b09a76e502d3ff65325d97d91614f247fe8aa5bf29c157360afc575b7365b1fa6660535ea2efe7a05309bcd08f15a5d5b22d2257e44b6b4f38a83badc428f4eb6038d0a98336c57ff74c9972a79b461f476eea9a6b76792aa2d448509dbf12076df0e985642dc6b1051f3d8334378e5f4bc76f80376c1ca480ee5ba6334ff17e677161b20d692b5f3fe3408c8e7c8548a8039a933051e981c10dce960adfafc3660e2491481b1235cdd7a1379a6d365e5aded6ac9b059748e02a68912d3242fce218db45c42cbf287370abcf976185812ecc216ad27f6d6202433", @ANYRES32=<r2=>r1, @ANYBLOB="130f0000000000002e2f66696c653000"])
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000001c0))
read$ptp(r1, 0x0, 0x0)
fstat(r1, &(0x7f0000000040))
signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000)

18:20:20 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xf6ffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:20 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0xffffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:20 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:20:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000003c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1}, {0x5}, @random="667b1521edcc", @device_a, @broadcast, {0x0, 0x1}}, {0x9, 0x1, 0x1, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @initial, {0x6}}, {0x6, 0x0, 0x1, 0x1, 0x1}}}, @ver_80211n={0x0, 0x5, 0x0, 0x2}}, @random="1030f27d2a7b064ab5f07193492c88252fea03bc44bf0970a032332393860a3dc6b8910ebac1d118c101cf250f1b7e2c756d77dec24e34cca6333cfb9311d2506a44a66baadab7008fcd042d3d706008568864cf0abf2ede7df112cc3cf94ae9865b5aeae4ed2433a76b4a98626ec33525cd24ceff7a86669e5aea614e27e6d93688b4049f507373c3164df4313d4fc6c36e5a8d98eeb30b39e28fa672bef20098d66ad5ef4215f0eb11aea80241136659405f11fcc7ea0a68dce217b97ac079d741ef4dda158d597e3b81b0a126db1608ab6f5c0977693d59eae1ce3c7498ca30ff2b34d093707359554bc4380234abe49aba62b21bae8870dbffa2cddee3f5a288239fa88cc618b4591918dff91b57ce1a0771011a2a71f4bfe2e3ec76be5b764fcb0b884c3b11be2d686fdc5678c07a8dc71b6e366644d668658d7f88709745bb8c6b268fe36e52f89e52ec72c484251ad62dde92d367a484f9f4fd1a0a3ee5714a638c2f8f78a25873bf1ccd81be8a431e38dfe9e9e25649d23c65a62ecb07e8aae80eed337f69d1ff3d2adb13295e0a72622fb1603c777163961b27c2ac768838e621d12b35f8dffcf1b9304166f832a3e30ab096898b3d31b61144a29ecb9e635dcf5ab1923ecc9927d1d61af0e05356113aa74f254997c0f92a31bf91ac9ebca503054e7a7c1161ded12527a83b2a3e5ffe97456a0308ce3ef9314e3d83da666c7f3fda17b286c757200a7fd0b27597233ffa96b8356e2e638a30d04c6d00bdb0d44585f3eb6a2bb280ee2368f80ce51fa2eaf1ee75f360617f00c52e4ad5491f8c3aeff7475ca797e9a0dd47b097f5731f063751f843f2da74327bd5b4179801a8e5dd885716174320853f3a29e92d8f23969f2fabd67b0646260a47771b52d9fab001aae4256fe257e3d2a3387ec76d3643bad9b2a6cd924efd2b7e6e05761d3ce6b1ef097c9fa0077c301834da5742a64fb0a9270bac38eb0419c8c2531d88d02ee43ef5d5d59425d579c76cef6d63d856c150ec282de84fb7af51789458f661ad1b123b978bf2377af783ff072b5594b710875c0bb8d49dc326bf7ea6ff2ea21487317bb2b1d07f0c98a77de3ec6334694942f3959e80d2e1845712a1c27238cd5415f4b71fd0896547d9f7dd5dc6273e83deddcd39682618b953682341b5b2125d4a43c0b89964b4acaac80438fc3a3bc35fd346ff7576cd967fd0d4379dffe61fecab125bd1d38f8a4af0bc88991bd357d1483afa04b9dfe1b68af4f4b6db5fa75d5c1345585cbee785d53e36c01060f5d81349b3ee6ac87b175fc5eaedfc1ab10cd250f9ba0513815098443254b00f4e567303709dba12ba168a7f3de47235c852029acbc8056dc2a30be18bfc71ba103b88c8123b3a53a081b016d87b500bd52b22eb6558c363e10e5cebf687a7c1e993849f2da71afa266e0b37ed4c26c0ec096758fd7204de2a1ff1228a09de389e136ead69c31421ab6346e140bbbde5fc870e8cbc6f56ecd265aa69b3fd1a88f29dadb5b1490149f6f477b48361cb75b800f03eab0a8d4dc1f57ea783404df87c615311feb2cab3f12f852f71b73b155275e59a9e2080f59d48f567f77798959f555ad976e502a4dbf84bad6c5ddfa1c6433c73ec7af2dd48d9c36f1397a0cc4d1c51bd75c55922ed325b1f5dc3faff583c34bbe19c8f48102baf543809f4336caa4fc42b6ded81e836683045db3a8d98a56d8b479123fa4ce3ffb80e617a11647329"}, 0x511)

18:20:20 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000c014c61305"], 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)

18:20:20 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/1}, 0x9, 0x0, 0x1000)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget$private(0x0, 0x620)
msgsnd(r1, &(0x7f0000000140)={0x3, "8ce52814acfaa392bd4acc57bb4cf3ded29675721e060835ef1c8340d5f25b825a910313249eb326e4bce3f9d730f7babfec851e78670bf9e796744d8de80da38bbb32a089df4ece9bd75e91735f995849d156e12d063a66012ec1f1588f4d98c5ce9278c3770256948aba3d1cdffdac3301d4f2a64a01edb426ae36"}, 0x84, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r2 = msgget$private(0x0, 0x410)
msgrcv(r2, &(0x7f0000000200)={0x0, ""/153}, 0xa1, 0x2, 0x1800)

18:20:20 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:20:20 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfeff0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2182.374618] No source specified
[ 2182.378392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2182.382814] No source specified
[ 2182.393650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2182.716467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:20:33 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061b0fa50bdee376dfb2d36225abc99a109da9f60b5e4e1ab7cc0d33d420e4228303b9baf855724466d492a90a92cf90b2bf02d52c7d102b465f6a009b88b22ddd5b345512a61da5f0adb6835e9ee8b418f0e6343bfc29cd3466904e68d326c76b896053d6f"], 0xa1, 0x3, 0x3000)

18:20:33 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:20:33 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff6623}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000100"/134], 0x86, 0x2, 0x2000)
msgsnd(r1, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:20:33 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:33 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xffff0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:33 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:20:33 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="389ea654e4cc00", @ANYRES16=r2, @ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8050)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40800)
r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r5], 0x2f)

18:20:33 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d3933362c00452495135c1c2f24e4c2ff8f26878e1690429ca3707893ac154d585a73124a2e3f2c751dcc455d426eab25890cd108ac13ae0c559bd965a0e52353970964c0585f12da11caea997dbc5e9730bf426449c4d1bbe8f88748839ba4c5731b1e3f970a8a8c15724b8a36713f70fe7a8223b938ec39c537b61ad31d9b1b129d0f563bb0622573901e16"])

18:20:34 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfffffe00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2195.768363] No source specified
[ 2195.774031] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2195.776144] No source specified
[ 2195.790182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:20:34 executing program 1:
r0 = msgget$private(0x0, 0x5b)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
msgctl$IPC_RMID(r0, 0x0)

18:20:34 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xffffff8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2196.143663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:20:45 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000d49206f300"/134], 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x420)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/236}, 0xf4, 0x3, 0x2000)

18:20:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0xbc10bff1fff0a2a, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:20:45 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, 0x0, 0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:20:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @from_mac=@broadcast, {0xd, 0x5b}}, 0x140, 0x3ad9, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x5, 0x0, {0x800, 0x125c, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x5}}, [{0xdd, 0xb9, "22f604fdae2a0e853760a05b3441fd08c606cc56a68c8188d3792a47f4bc44e855e2c72cf843800ebef3675618c74401f7c15ee2e3b150b5c229d57361f23d42306d7427fa38802b0d346a61f7164af91615c192a3f114e56cd201925710e1aeb91f7aed102e70dd047aa5e85b962657daa4931d600d25492db964ea67d6044b3ee6b89ed8fbea3f066521afb8b0714e7bb1be59f7a06f1f411530980acaf95f9d7a8b459d6fdc96bb7d01b8440a77dd35ac11eab8a7343778"}, {0xdd, 0x80, "a6ffaca8bd55f94e3b9b258372ac9304e5fa8a6e06b386b3a898cc4bdb6c24658006de6eb8e6c54d17d1a4b02c34dcfc7f99b97dba749b9864329d74491e50f39d00251aa41e296b3ebcfcb3edd1d6f7ff843ca037bc8df1a9ac0845ccba1292997f01351e1c269450b62225fcd63314a7ea6f65f23d79c67cb921df3deb6979"}, {0xdd, 0xb9, "3bc1263e26b3c316e64a3be380be31977eddcc958c0f68a7f75fa207be02f68a506e64d77cc9e6bde816f87b631cb6fab2c34b2411f53ae19b27a4fc4d8bdf407956b0d5b34c3b115063db686a6ebe4b791d0e5c6c070a79735d2ab1bddfa164fa442e34f00b2c0af3fe293565e12bd0e5c56b37f8f18bde5830bbe804dc54f2a6b21daa6143a86bc026dd407cfc09f96ff6804575bcc8b254b6815714a55f05554482743cfea6ea6b1cdaa51bbfa5871a42232029adf004ef"}]}, 0x238)

18:20:45 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:20:45 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000018"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:20:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfffffff6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x3, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2206.875830] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
[ 2206.918232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:20:45 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@errors_continue}, {@fat=@nocase}]})

18:20:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2206.940718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:20:45 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:45 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed7aaab59f845e5c2c08543b53a16349773ac8cfe9b0bfd166d37fa35fa8301cd797afff94e94883ab946e2fce469423be2183f20e7fb691e86b52f0f89973da00621ce6131db94b7d9f395b0afe49bb8f9c7b4a76c95a09f5b1b2563600"/259], 0xa1, 0x3, 0x3000)

18:20:45 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x0, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 2207.029391] No source specified
[ 2207.043485] No source specified
18:20:45 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:20:45 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000140)=""/81)
msgsnd(r0, &(0x7f0000000000)={0x3, "a2a6a38af8d4aafe7b78ccc4d99021ebfd8d505d1d1bfb53315e8fef9caf0490e87d52472b83e17b48c3c22625907fb22be398864b4d32fc0148e8e8646146a6750a27bbfa051820661af794b15088dfc50bd8ece970df"}, 0x5f, 0x800)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:20:45 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2207.136565] kernel write not supported for file [eventfd] (pid: 25758 comm: kworker/1:1)
18:20:45 executing program 6:
r0 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, &(0x7f0000000180)='./file0\x00', 0xc}, 0x4d)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1010000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@access_client}, {@cache_loose}, {@uname={'uname', 0x3d, '\\'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@access_any}], [{@subj_role}, {@appraise}, {@fowner_gt={'fowner>', 0xee01}}]}})

[ 2207.250400] No source specified
[ 2207.256533] No source specified
[ 2207.280012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:20:57 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:20:57 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget(0x1, 0x120)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0x3, 0x2000)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:20:57 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x0, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:20:57 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:20:57 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x7, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:57 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0)

18:20:57 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

[ 2219.158838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2219.169558] No source specified
[ 2219.184412] No source specified
[ 2219.185113] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2219.199424] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:20:57 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfeffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:20:57 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget$private(0x0, 0x200)
msgrcv(r1, &(0x7f0000000140)={0x0, ""/148}, 0x9c, 0x0, 0x3800)
msgsnd(r0, &(0x7f0000000300)={0x0, "3ebb6c11f5f6845451d756d129a6be485c4e507e08373a445d271517d895b89dbbf9541a0705f4eceee3071240c36b5ef1109674c8539d6c17e3861cdfae733b552b6b16dd0d270ac4ef10d6bec82f952dfacf78812b956c836baf79fd94edd3a4c31cf4255c0ea7ee12e5339218b9ed83734bd2b8b5ba35cc36d3eba61c1b66927cdb484c85f5870adfd9bd7cd72bac5f9e9207acd2e50ff02b2cc4ee791ce497130b4de9d9b858078bd570ff05492fc27dfecdfc3e6d869cf205"}, 0xc3, 0x800)
msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000fa0a2f03bafc6c1f1cc0f90f08bc385c5268bc9b776861683f5d3f3eafe409aa393a912726286d6c5ca7995e74d7ded1f173737030d9e89a9d2b15d13053681233f504373f538de5712395a4b795e77a61ffc190eb742ef4aec84d5640e8f65b3b15e8ee19ccbe6877808816eef605ea5adb48d4fe84e381dcbd17bfe80fbfea5fac7aa4a8b2f001ff8dbf00b6ddb6101fa3710fb85fd4259ac203c8e31e066ba251eeedcb24cfb72424914131bd88164e314f53866893497c09a3ede0999aa763bac84a294c9372c4ca1d628b2654087eddbc80b39c952d38d80e"], 0xe3, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:20:57 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d3933362c00c248f2c0c664fc8752438b7288a2dbe8c751b5ccac68730173ee235c79d189ad99156839e966ae9a858091a2cda0929793350cb8af7e030b"])

18:20:57 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2219.344460] No source specified
[ 2219.348594] No source specified
18:20:57 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/173}, 0xb5, 0x0, 0x3000)

18:20:57 executing program 6:
r0 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
connect(r1, &(0x7f0000000040)=@generic={0x14, "0e1233d726097ef0840da5806f8eec1a911371e8f5c13c9e8b944452e72ca72f1651bdd36d76a3db1a0a63d2a87122289e7eec896703df70e1931bbfd4a3881e2f28597504447b8c195349d81e49481e701888b0700ab2b38f9e33ed9d7a993344d764b3fce2899cc956109abc77d67a4397c11c78476c6b4104e8a43175"}, 0x80)

18:20:57 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x100000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2219.469895] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
18:20:57 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 2219.497294] No source specified
[ 2219.500911] No source specified
18:21:08 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x9, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x1, 0x20)

18:21:08 executing program 4:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/250}, 0x102, 0x1, 0x800)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget$private(0x0, 0x100)
msgctl$IPC_RMID(r1, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgsnd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xb5, 0x0)
r2 = msgget$private(0x0, 0x2)
msgctl$IPC_RMID(r2, 0x0)

18:21:08 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x0, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:21:08 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgsnd(r1, &(0x7f0000000000)={0x0, "8093052f3708bf7f38a9"}, 0x12, 0x800)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r2 = msgget$private(0x0, 0x40)
msgsnd(r2, &(0x7f0000000140)={0x3, "437ba66e2daa5b3d659f43168c7e794d95c8f3da95fe73afdb78da843a4f49c0ef430ebd17b73069adee7840340e3cc73649680015e1ea47953191999a4c0f713e4be8e36571168869d27fc2e7508465ffb23eedff1fcf63952beeef04595f31272997f058c07898dacd77743d7b6f879900031eb92bf6b36993d95c26a09b8726abe51cb0aecdb4ccd82d82ae77638a8a4e94fa58172cc12330db62eff5"}, 0xa6, 0x800)
r3 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgrcv(r3, &(0x7f0000000200)={0x0, ""/111}, 0x77, 0x1, 0x1000)
r4 = msgget$private(0x0, 0x2)
msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/17)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000080000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000ffffffff00"/161], 0xa1, 0x3, 0x3000)

18:21:08 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x200000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:08 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1}, r2, 0xe, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:21:08 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x8001, 0x40c400)
ioctl$FIONCLEX(r1, 0x5450)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r2, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1100)
setresuid(0x0, r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa00040, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x380000}}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@cache_none}, {@loose}, {@noextend}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_type}, {@euid_gt={'euid>', r3}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}})

[ 2230.775458] No source specified
[ 2230.782569] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2230.809833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:09 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/161], 0xa1, 0x3, 0x3000)

18:21:09 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d3933362c00c96c8ec4311fa770b801a1e3a06bddc332229d72f177ccbff6411be3d36d680f2d41bc905eb074b967e6e52995cf1a94bf8b01518f53dfaeaaceed8b578c8a31e05dc880cca39ef6db3958d2ee04f0af22907db043ba9e9dd340e85ed0a39178704c90ea489d48c99a7fc51ce9abe621152fe3abfb6176f4065a754dea77987253294808ca5806a0a7a4240b6f71943e4278b363"])

18:21:09 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x300000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2230.910521] No source specified
[ 2230.915726] No source specified
18:21:09 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xa, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:09 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x700000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2231.007612] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:21:09 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)={0x1, "b76a8acdd05cb5abbd12ad9093831490198d6cdf2d19d4c8546fe7ddaca3ed628647d9c22db96e5d69e52fe2314e3bd38865d1c407a047886c39709b99501755f0e11e7ef275aca530d36c1a7330351053bfea8caae989a389bad8df3b"}, 0x65, 0x800)
msgrcv(r0, &(0x7f0000000080)=ANY=[], 0xa1, 0x3, 0x3000)

18:21:09 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x36, 0x45, "d3c9f5b1c5326c05f968e63d699bda63182966a24ee09f5d40ec4cd80ed525ac2ae4f6514306f78be1dc1b9e2d61945601a5"}, @NL80211_ATTR_TESTDATA={0x47, 0x45, "d43a77887de831ef3516f07a0a5752dfc4504f6f235abe304932187d14a40777517282bb7a5bd68caa920e845060f494da62c3c3de3998b30e4b42207080d130e1554a"}]}, 0x9c}}, 0x20004050)
r3 = gettid()
tgkill(0x0, r3, 0x80000000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6})
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x9, 0x0, 0x0, 0x830024, &(0x7f0000000280)={[{@fat=@check_strict}, {@fat=@gid={'gid', 0x3d, r5}}], [{@dont_appraise}, {@dont_hash}]})

[ 2231.013844] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:21:09 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
r1 = accept(r0, &(0x7f00000056c0)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000005740)=0x80)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000005780)={@in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x45, 0x0, "657bc239304989a250e3a2f1c182e851797d8161130a5b14d113d9f35c84a1bb824195ea31cb0ab1ab372f0a9e3e85c72a9809ff1d13b226c0309923beacac314e8b2f3c1468c5358ae710cfeb955d2f"}, 0xd8)
write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xa0, 0x8, 0x5, 0x9, 0x2, 0x3, 0x1000, 0x241, 0x38, 0x222, 0x7ff, 0x101, 0x20, 0x2, 0x8, 0x0, 0x7ff}, [{0x0, 0xde7, 0xfff, 0x5, 0x1, 0x8, 0x0, 0x2}], "b232715e97e8bd590fa848417f964bdf91830dd62be210f28e54e13e203689a255f5d0cc3e6bea705e26a4b4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x984)
r3 = msgget$private(0x0, 0x0)
r4 = msgget(0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000002340)={0x0, 0x34000, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01fb6bfcff000000000006"], 0x18}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000cc0)={0x244, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "e9c0e8fd67e352ad9b9fb79ff20625f868fb5d67d872e80b6ab2eb5f7940b0cd0b643288c90608f1761e5b6d1bc622073d132c7b5912403060d01643321712b1e94dfc84676196ecbd72650525f8a578c66291f2aaf9197058cb3fe9ea9fb2a0370fbca9ec2f60b592c164fdc7cbc1d744f8c25e84edee73e6b57a877907d7f9f7c1bf6c308a63f908493f24eaf1ccae5202a86e812b7a05505683ef75c97f12fe94253ac3c1bb9b1c4cf47715cdb948db9dd6f9d1907392a1023d2f0d0365ada6c77e16e39979"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xad8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7f}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'q+!{K&:\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '0)!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x244}}, 0x51)
msgrcv(r4, &(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009115fd3e9c2d0cd4b70db3e9f51900b244f4c0a2098b0d78261f0dd3db6dd9593fc3b5e843cb5c5e3f20dbce6b76"], 0x86, 0x2, 0x2000)
msgsnd(r3, &(0x7f0000000100)={0x1}, 0x8, 0x0)

[ 2231.139286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:22 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xb, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:22 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x0, "dbcd66964d837b2e38862cf19341586f259fe4f1fa1e5637b6b72a0d9bed14c1026ba5070758a270a7e0326d102308c9a601e08d4cbcd88543fa68d028c8365227ebbb28d4087e438a83a536459268140a0ac28122c6b237f8e2edf9dc7a755a1e11fb18751b394381a7ba7356f1b2798257db8cea6c5da3c2d9f21601b733d39596115298438211e1cd7d9e68a0561a842def59be37744cf6e2117d9e58b4167a7d93cbf07e01cf0b6d3635d6128dec5882894b53"}, 0xbd, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:21:22 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000140)=""/189)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:21:22 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x0)
r2 = msgget$private(0x0, 0x80)
msgsnd(r2, &(0x7f00000015c0)={0x1, "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"}, 0x1008, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000180)={0x0, ""/230}, 0xee, 0x0, 0x800)
msgrcv(r0, &(0x7f0000002600)={0x0, ""/4109}, 0x1015, 0x0, 0x2000)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000280)={0x1, "e931deec2566"}, 0xe, 0x0)
r3 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgsnd(r3, &(0x7f00000002c0)={0x2, "74d51efdf12367ea0448dc39f879774ef4c0973a59fd1ebd03ed3dda8ab6296af2fdbefffd10a93eb9c0de01e05dba19a1fee8c4121ac8c8c733cd61a64b43af7d087232b45f8c1ffe68b1846625cc078d"}, 0x59, 0x800)
r4 = msgget(0x0, 0x1d)
msgsnd(r4, &(0x7f0000000340)={0x0, "8a3aa078b4932c0b00fcd7c1372022a1857245f7d710fe919298781fe67eba46ce029b38f4a2385b1e50f1"}, 0x33, 0x800)
msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0300"], 0x8, 0x800)
msgget(0x2, 0x49)
msgsnd(0x0, &(0x7f0000000040)={0x0, "3b7a56e3af8e72a346b782a2f0a1768484f7b7017b6029c7"}, 0x20, 0x0)
msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000380)=""/60)
msgget(0x0, 0x141)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/145], 0xa1, 0x3, 0x3000)

18:21:22 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
gettid()
r2 = getpgid(r1)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r2, r1, 0x1, r3, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r4 = fork()
r5 = fork()
pidfd_open(r5, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r6=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r4, r0], 0x6}, 0x58)
preadv(r6, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r7, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r7, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:21:22 executing program 6:
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x80)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"])
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100, 0x1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4768713c3180b606f780184d2b3e038d96f1c0cad630f6747b65e65dec2985decfcc7903900f2042641d6331d05093181ec9a303c3604cd91e4f335381692c91082b4ace1f5727496cc619e73c53983f048d7c3fe5436205e0f2752c61a75c257a344458f88c1808179f86c42dbabea201c72e6e841da317946b8be14e4448d6cb820e7451e55e9a9c84bca5a6c3215d36b073cfe063afee07a8a784e20d77832481e25f2bb6f0aa5111ff7e0e04f13ed2bc", 0xb2, 0x1}], 0x1010084, &(0x7f0000000300)={[{@dioread_lock}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@dont_measure}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}]})

18:21:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x800000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f00000001c0)=""/41, 0x29}], 0x2, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0)
syz_80211_inject_frame(&(0x7f0000000b80)=@broadcast, &(0x7f0000000bc0)=@ctrl_frame=@bar={{}, {0xaa}, @broadcast, @broadcast, @multi}, 0x12)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
signalfd4(r2, &(0x7f00000002c0)={[0x56f2]}, 0x8, 0x80800)
r3 = fcntl$dupfd(r0, 0x0, r0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @device_b, {0x4, 0x1}, @broadcast}, {0x2, 0x1, 0x1, 0x0, 0x20}}, {@type01={{0x0, 0x2, 0xf}, {0x2}, @device_a, @random="762815da58d0", @random="b8506a248e60", {0x7, 0x80}}, {0xa, 0x1, 0x3, 0x1, 0x3}}}, @random="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"}, 0x779)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3f, 0x40, 0x1, 0x24, 0x0, 0x8, 0x48006, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x70e0, 0x0, @perf_config_ext={0x1, 0x9}, 0x998, 0x6, 0xc07, 0x7, 0x4, 0x7, 0x3f, 0x0, 0x20ab, 0x0, 0x5}, r1, 0xa, r3, 0x0)

18:21:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x810000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2243.868374] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2243.873466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.881301] msdos: Unknown parameter 'uk'
[ 2243.886686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.888551] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2243.893040] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 2243.903229] msdos: Unknown parameter 'uk'
[ 2243.904765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.913890] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
18:21:22 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:22 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '437'}}]})

18:21:22 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget(0x3, 0x0)
msgrcv(r1, &(0x7f0000000100)={0x0, ""/5}, 0xd, 0x1, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000085d158283aa5a5cc58d561c22210000"], 0x8, 0x0)

18:21:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x900000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2244.043310] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2244.064766] No source specified
[ 2244.072359] No source specified
18:21:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xa00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:22 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
gettid()
r2 = getpgid(r1)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r2, r1, 0x1, r3, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r4 = fork()
r5 = fork()
pidfd_open(r5, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r6=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r4, r0], 0x6}, 0x58)
preadv(r6, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r7, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r7, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:21:22 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@nodots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@dots}, {@nodots}]})

18:21:22 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x300, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2244.222912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2244.228182] No source specified
[ 2244.232895] No source specified
[ 2244.245296] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
18:21:22 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:21:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xb00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:22 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756d61736b3d303030303030303030302e303030303030303030b8553030302c636f6465854be5ff3d3933362c0030085eb809953ec1e960e003263a9265f69105ea69e5d6d50d256dbad675386d4c566bcdd83d9916d52d5487d18844adbceb44e419652cc02e3f"])

[ 2244.743342] msdos: Bad value for 'umask'
[ 2244.745731] msdos: Bad value for 'umask'
18:21:23 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:21:23 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x700, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

18:21:23 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
gettid()
r2 = getpgid(r1)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r2, r1, 0x1, r3, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
r4 = fork()
r5 = fork()
pidfd_open(r5, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r6=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r4, r0], 0x6}, 0x58)
preadv(r6, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r7, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r7, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:21:23 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x1000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:23 executing program 6:
r0 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB='umask=00000000000000000000000,d\a\x00s,\x00'])
getdents(r0, &(0x7f0000000000)=""/141, 0x8d)
r1 = open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x90141, 0x50)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000340)={@desc={0x1, 0x0, @auto="bf7b9e52639594da"}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xee00}, {0x2, 0x4, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x3}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0x4, r3}], {0x10, 0x2}, {0x20, 0x7}}, 0x64, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x1}}, './file0/file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x22b061, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}, {@msize={'msize', 0x3d, 0x8}}, {@msize={'msize', 0x3d, 0x3}}, {@access_user}, {}, {@version_9p2000}, {@access_user}, {@version_L}], [{@euid_eq={'euid', 0x3d, r2}}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'msdos\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xf3\xfd\xcb\x9a\xcf\xf9/\xa8\xc8%\xd6~p\x9c/tl\x8d\xa2\xa6\x82\x89\x87\xf5\xb2\xc1\x98Fw\xd0%2Z1\xd9\xb8x\xcdVrc\xea\xe9\xe8\x198\x0e\x80\x9a[#n\t\xdd0~,6\xc3b\xec\xf4nP\xdfD\x90\xc3\xaf\x89U|C\x94\xab\xdf\x88Z\xb1\x1c'}}]}})

18:21:23 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x2, 0x220)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/168)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

[ 2244.895023] msdos: Unknown parameter 'd'
[ 2244.903469] msdos: Unknown parameter 'd'
[ 2244.927082] kernel write not supported for file [eventfd] (pid: 30674 comm: kworker/0:2)
[ 2244.958647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2245.304812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:33 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100), 0x8, 0x0)

18:21:33 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:33 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

18:21:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@broadcast, {0x5, 0x6}}, 0x9000, 0x8000, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xb7, "1e82a267ea5432841e4c8c7bedfe3d6bf37f4befff68f43fb3ca6994c3721c131f7941df472da616c8d637fb2dd66fb7e727bca947d7fbfaa6024f05296d44a1a4cb5380dcaaced151888216176748f212ce327975d169b40efb08c9ccd7bcbb5a8d73fae58cdf63465ead103167ec06f0cb61189c120cd36aaae640d5b6809ecce6d63402ff0401a6d6262a5c466c011a807b0e05a9879206d24a0dd6295b3e20f448b3d127c1ee7f075dc718e4e48c45346a3bda42b7"}]}, 0xdd)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000280)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x0, 0x5}}, @ver_80211n={0x0, 0x41, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x5, 0x80}}, @void, @void}}}, 0x23)
syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@device_b, {0x6, 0x2}}, @tdls_setup_resp={0xc, 0x1, 0x50, 0x81, @val=0x10, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0xafcc, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x2, 0x40}}, @void}}, 0x3b)

18:21:33 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB="77303030303030303030303030303030302c636f3d3933360000000200700000"])

18:21:33 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x810, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:33 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x2}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:21:33 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0x0, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 2254.946760] msdos: Unknown parameter 'w0000000000000000'
[ 2254.951852] msdos: Unknown parameter 'w0000000000000000'
[ 2254.963289] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2254.994578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2255.014202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:33 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0xa13}, {0x3, 0x10000}]}, 0x14, 0x1)

[ 2255.058701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2255.076067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:33 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2010000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:33 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x900, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:33 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget(0x0, 0x0)
msgsnd(r1, &(0x7f0000000000)={0x2, "39ca693fac5edc5b6423bd1e1b3e80ac8284d977212b9a217a82a2f3f64c029763ba401c7683470bc40d7d915295badbfc1308dac96a"}, 0x3e, 0x0)
r2 = msgget$private(0x0, 0x80)
msgrcv(r2, &(0x7f0000000340)={0x0, ""/224}, 0xe8, 0x1, 0x3000)
msgsnd(r1, &(0x7f0000000140)={0x3, "4fac6308b72b06028d2f940d3148b41fa4be98533ccb79af4275d27ba6cc25cd37d82394b069f667c820b2a7e81b28a7600a0d79f5aaae0e0a594cac7751a9a8f0933020ebe24a6d5238b469d075e6707850a1c0d56411c6ad524c01d03c1ab5d1a04375941627ec2982a03d2f91aeeb44f84d8bd30deeef0b9287743da2c82cb019426222e6a728e2803220e8e3626cfa04f2c105945b39097594b84fc63d8c5fe04f38e02a675f74b7086bc08bf88c49e19f31d0ea152f2888f070c4081cfaedac6b9b3832281af7"}, 0xd1, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)
r3 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgsnd(r3, &(0x7f0000000580)={0x1, "0a44cc146b5e32987027e1b3280e506f0365de380b4abd654c48d69c56880c3b8fc63fcb0d7110f2439d1c172222454ff401574fb4c218b7f0ca76e39abfeed5fc2b13d5b455063db5e0427ab01101103d74c60b6966c5731736308086b32f1d6e7356a6b167564b316a7ca5c1090468fc065e309ae1c59694b9feb05eeb5e492c850b41c3a300c17923c45dbe26fbd91780b4006b4e726ad27029c0c35b60fa37ef1bdbaefbd240b20b2341264b06fb5262a9d229351da89dc7d380fbb8343fa15b8875a2de000cf1d8ffe49d667609a420e5c3a482c00ee8528ad30d37454c00"/234}, 0xf2, 0x800)
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000440)=""/162)

18:21:33 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x1, 0x3000)

[ 2255.184892] No source specified
[ 2255.197193] No source specified
[ 2255.198811] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
18:21:33 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x3000)

18:21:33 executing program 6:
r0 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@quiet}, {@fat=@codepage={'codepage', 0x3d, '864'}}]})
setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x7, 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x880, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@nodevmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'user.incfs.size\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
openat2(r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0xa2000, 0x1d3, 0x4}, 0x18)

18:21:33 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0x0, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

[ 2255.419886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2255.435637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2255.442916] No source specified
[ 2255.449990] 9pnet_fd: Insufficient options for proto=fd
[ 2255.453447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2255.456536] No source specified
[ 2255.459622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2255.463781] 9pnet_fd: Insufficient options for proto=fd
18:21:43 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xa00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:43 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:43 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x3000)

18:21:43 executing program 1:
r0 = msgget$private(0x0, 0x4)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x3, "db8f687da3c8f7a9cf33aebafc"}, 0x15, 0x0)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgrcv(r1, &(0x7f0000000040)={0x0, ""/249}, 0x101, 0x1, 0x3000)
msgrcv(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000056b41f1e203a0a91489895bb9fa58a7cde7afba2cd7b78f7b820edf21360712a784d2a61876475523513cbedc3eb9545fd2d30c768"], 0xa1, 0x3, 0x3000)

18:21:43 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000400"/134], 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:21:43 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0x0, 0xffffffffffffffff, 0x1)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:21:43 executing program 6:
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x6, @private1, 0x4}, {0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x983b, [0xf9a, 0x10000, 0x3, 0x9, 0x3f, 0x0, 0x3cae, 0x7]}, 0x5c)
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})

18:21:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000003c0)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @broadcast, {0x9, 0x9}, @device_b}, @random="63fc92743ea560f4bb6443918f28cdfdd3d33370869fd1f6123ea1657ac5af67797e118734adfec6602f37efe3ca2240ce862d2f1dd0033dffa5351b3dcca1b5e95832c97676a00f46d4c2d9b4a602edd04209fe49a540c740e20b01d9db7d27f5a6a30937918bc2160376013ffc868b558ed12cdef5f365e53c9c31ea06f8ecf345afe152530c6b9410b556bd59472d2a607584ad449adc272038f933da985ce17ad28c7de195a755bc4fd8ef6c58fae1a8e17c04371347557d877bdf4e194ef26ff650c36c4edbbbc85f992d4bc6b778158f12d20ff7af14da1b6c9c18f10239043d224342c7282542075bcc333a63cd4f613d73cfb42839bdf3b91645e2a8ff436a4ccb5e55ea8d8bce89b98db8dc288c62fae8bcfede4b661d6dfe0f9df5b9eb041691d1474521afe59d3efff2756f49df7d128ab8dd7773667b6af1a23a779c20f5d25ac8c93819bfd3dbb61e7107a6e5a14e2875e314267629530dbaa103bf25503936d7c115e8b279f1e335883c01c194091b1de33f9396bd24e5029630cfd89e506725b2d2f64b326c193c3c77adfaa491856283b30a3a65bebb6aea8b6bc47c881cb737d231f39e75d57ece9aef403ec12024b612e026314c5ab04dae4a35df7dc1edc289d84e106df88678ab605e86d40604079a3a564fc4bfe3f9f5cc5729610c741e412f8a75239c3b9524cca985451299b4c3c6c5a11201ec103040913e041d1172cc82d15edd851c3091d6e52a10f179a5b7571802ba6a"}, 0x23c)
read$ptp(r1, 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x1)

[ 2265.508307] No source specified
18:21:43 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
r2 = geteuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x308000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@access_any}, {@nodevmap}, {@privport}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cachetag={'cachetag', 0x3d, 'msdos\x00'}}, {@aname={'aname', 0x3d, 'msdos\x00'}}, {@afid={'afid', 0x3d, 0x49}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_gt={'euid>', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r1}}, {@subj_role}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}]}})

[ 2265.544311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2265.561207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2265.580684] No source specified
[ 2265.584356] No source specified
[ 2265.600780] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
18:21:43 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000000040)='./file0/file0\x00', 0x2, 0x0, 0x0, 0x808c20, &(0x7f0000010b80)=ANY=[@ANYBLOB="756d61734b3d30fdffffb5503b2c30303030303030527771ff0f1e61676d3d003fca52610000000000000000"])
rmdir(&(0x7f0000000000)='./file0/file0\x00')

18:21:43 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8cffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:43 executing program 1:
r0 = msgget$private(0x0, 0x0)
r1 = msgget(0x0, 0x1)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/18}, 0x1a, 0x1, 0x1000)
msgsnd(r0, &(0x7f0000000040)={0x3, "0b66ef752008002322f08b1bd2da99c358705a38a807e88308451bcc21d5e33c7b34"}, 0x54, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:21:43 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ecffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f900"/134], 0x86, 0x2, 0x2000)
r1 = msgget(0x2, 0x633)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x1, 0x27e)
r3 = msgget$private(0x0, 0x208)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000000))
msgctl$IPC_RMID(r2, 0x0)
msgsnd(r1, &(0x7f0000000140)={0x1, "6f64e200000000000001ff5bef061aea5b88d9d2655cc2090404f681f1a45d5ff7b4977e4a2b13101b0938fec2be60b88b3a6c63e66f5382db9beadd098ca0371c6d5e9d09490808d4801fec8795440939851126d2b6e6c2be3b0cfcac8df1c850f02a3242dd0cb4a5880ef860122171b531815b7aa8741246098b66ca51b160565e152d399f8a9fc691c3293e1966e115ec32b53c9815721d4ff583536ebeb5914e0fc5e354893abcd3bdba37"}, 0x22, 0x0)

18:21:43 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fdatasync(r0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"])

18:21:43 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x3000)

[ 2265.759900] No source specified
[ 2265.765796] No source specified
18:21:44 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303933362c00d6145ad8e480160d52b22e162033b48b4b51ea63b6da2e001168c7925554c7874a219049c63376bf03793c0f42a0f063fc458851a0c7e1d9cb12d131e3842429481e0f22d60be0cd5461dffb3e73aea37d9714c7d0522d57b506e6bb1a6e1665"])

[ 2265.852741] msdos: Bad value for 'umask'
[ 2265.854317] msdos: Bad value for 'umask'
[ 2265.898086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:53 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xb00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:53 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000001000000000000ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f5a2c1200"/231], 0xe5, 0x1, 0x3800)
msgsnd(r0, &(0x7f0000000240)={0x1, "0130400a9e7f43c581cf93a64a47b181d0b928a1d71ff8e6d9219fc30c9804f936c916094d8c8b960f9a15a9c462923ad2e71c7e7ca5798fc90556f1acdb0f907a9ed2569e0bada5f92242dfb8fa75ce5fe8d4daeb3f11c96ca5f7d76b8c43179170544d47407b40039ff68eeffaca79ef54968ed3ee521f9bebd26f16a764e46669ad0c05163de5e1a511d424bba6007b4fe8040a87e1"}, 0x9f, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:21:53 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x0, 0x3000)

18:21:53 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fcntl$setpipe(r0, 0x407, 0x100000000)
r1 = syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@dots}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffc3f}}]})
mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x200, 0x103)

18:21:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xf6ffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:21:53 executing program 4:
r0 = msgget$private(0x0, 0x602)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
r1 = msgget(0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x80000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpgrp(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x1100)
setresuid(0x0, r5, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a80)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000002840)=[{&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/117, 0x75}, {&(0x7f0000002740)=""/90, 0x5a}, {&(0x7f00000027c0)=""/66, 0x42}], 0xa, &(0x7f0000002900)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r7=>0x0}}}], 0xa8}}, {{&(0x7f00000029c0)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a40)=""/95, 0x5f}], 0x1, &(0x7f0000002b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f0000002bc0)=""/40, 0x28}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/90, 0x5a}, {&(0x7f0000003c80)=""/238, 0xee}, {&(0x7f0000003d80)=""/191, 0xbf}, {&(0x7f0000003e40)=""/155, 0x9b}, {&(0x7f0000003f00)=""/168, 0xa8}, {&(0x7f0000003fc0)=""/177, 0xb1}], 0x8, &(0x7f0000004100)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000004900)=[{&(0x7f00000041c0)=""/25, 0x19}, {&(0x7f0000004200)=""/227, 0xe3}, {&(0x7f0000004300)=""/223, 0xdf}, {&(0x7f0000004400)=""/200, 0xc8}, {&(0x7f0000004500)=""/238, 0xee}, {&(0x7f0000004600)=""/140, 0x8c}, {&(0x7f00000046c0)=""/192, 0xc0}, {&(0x7f0000004780)=""/177, 0xb1}, {&(0x7f0000004840)=""/38, 0x26}, {&(0x7f0000004880)=""/107, 0x6b}], 0xa, &(0x7f00000049c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00040005438a000000000100000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88}}, {{&(0x7f0000004a80), 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004b00)=""/251, 0xfb}, {&(0x7f0000004c00)=""/112, 0x70}, {&(0x7f0000004c80)=""/59, 0x3b}, {&(0x7f0000004cc0)=""/75, 0x4b}], 0x4, &(0x7f0000004d80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000004f00), 0x6e, &(0x7f00000061c0)=[{&(0x7f0000004f80)}, {&(0x7f0000004fc0)=""/4096, 0x1000}, {&(0x7f0000005fc0)=""/10, 0xa}, {&(0x7f00000097c0)=""/215, 0xd7}, {&(0x7f0000006100)=""/74, 0x4a}, {&(0x7f0000006180)=""/55, 0x37}], 0x6, &(0x7f0000006240)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000006280), 0x6e, &(0x7f00000065c0)=[{&(0x7f0000006300)=""/40, 0x28}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/190, 0xbe}, {&(0x7f0000006440)=""/50, 0x32}, {&(0x7f0000006480)=""/72, 0x48}, {&(0x7f0000006500)=""/186, 0xba}], 0x6}}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f0000006640)=""/84, 0x54}, {&(0x7f00000066c0)=""/131, 0x83}, {&(0x7f0000006780)=""/233, 0xe9}, {&(0x7f0000006880)=""/67, 0x43}, {&(0x7f0000006900)=""/83, 0x53}, {&(0x7f0000006980)=""/72, 0x48}], 0x6}}], 0x9, 0x60, &(0x7f0000006cc0))
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009540)=[{{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006d00)=""/94, 0x5e}], 0x1, &(0x7f0000006dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000006e40)=@abs, 0x6e, &(0x7f0000007100)=[{&(0x7f0000006ec0)=""/135, 0x87}, {&(0x7f0000006f80)=""/51, 0x33}, {&(0x7f0000006fc0)=""/160, 0xa0}, {&(0x7f0000007080)=""/23, 0x17}, {&(0x7f00000070c0)=""/52, 0x34}], 0x5, &(0x7f0000007180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f00000075c0)=[{&(0x7f0000007240)=""/219, 0xdb}, {&(0x7f0000007340)=""/131, 0x83}, {&(0x7f0000007400)=""/224, 0xe0}, {&(0x7f0000007500)=""/132, 0x84}], 0x4, &(0x7f0000007600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r9=>0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000007680)=@abs, 0x6e, &(0x7f0000007780)=[{&(0x7f0000007700)=""/63, 0x3f}, {&(0x7f0000007740)=""/20, 0x14}], 0x2, &(0x7f00000077c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r10=>0x0}}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000007880)=@abs, 0x6e, &(0x7f0000007b00)=[{&(0x7f0000007900)=""/146, 0x92}, {&(0x7f00000079c0)=""/190, 0xbe}, {&(0x7f0000007a80)=""/73, 0x49}], 0x3, &(0x7f0000007b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000007b80)=@abs, 0x6e, &(0x7f0000007e40)=[{&(0x7f0000007c00)=""/137, 0x89}, {&(0x7f0000007cc0)=""/65, 0x41}, {&(0x7f0000007d40)=""/213, 0xd5}], 0x3, &(0x7f0000007e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000095a5000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=<r11=>0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000007f40)=@abs, 0x6e, &(0x7f00000093c0)=[{&(0x7f0000007fc0)=""/140, 0x8c}, {&(0x7f0000008080)=""/48, 0x30}, {&(0x7f00000080c0)=""/119, 0x77}, {&(0x7f0000008140)=""/238, 0xee}, {&(0x7f0000008240)=""/72, 0x48}, {&(0x7f00000082c0)=""/118, 0x76}, {&(0x7f0000008340)=""/4096, 0x1000}, {&(0x7f0000009340)=""/125, 0x7d}], 0x8, &(0x7f0000009440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x7, 0x10002, &(0x7f0000009700)={0x0, 0x3938700})
r12 = getpgid(0x0)
r13 = fork()
kcmp(r13, r12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
kcmp(r9, r10, 0x1, r8, r6)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000009740)={{0x2, 0xee01, r4, r5, r7, 0x110, 0x3}, 0x0, 0x0, 0x4, 0x4, 0x2, 0xffffffffffffff80, 0x8, 0x20, 0x1f, 0x7ff, r11, r12})
msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0)

18:21:53 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x0)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:21:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, 0xffffffffffffffff, 0x66f16000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)

[ 2275.466389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2275.472320] msdos: Bad value for 'time_offset'
18:21:53 executing program 7:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/34}, 0x2a, 0x0, 0x0)

[ 2275.487154] msdos: Bad value for 'time_offset'
[ 2275.489568] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
18:21:53 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcaa935f7fd4c3b500"], 0xa1, 0x3, 0x3000)

18:21:53 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@broadcast, {0x5, 0x6}}, 0x9000, 0x8000, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xb7, "1e82a267ea5432841e4c8c7bedfe3d6bf37f4befff68f43fb3ca6994c3721c131f7941df472da616c8d637fb2dd66fb7e727bca947d7fbfaa6024f05296d44a1a4cb5380dcaaced151888216176748f212ce327975d169b40efb08c9ccd7bcbb5a8d73fae58cdf63465ead103167ec06f0cb61189c120cd36aaae640d5b6809ecce6d63402ff0401a6d6262a5c466c011a807b0e05a9879206d24a0dd6295b3e20f448b3d127c1ee7f075dc718e4e48c45346a3bda42b7"}]}, 0xdd)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000280)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x0, 0x5}}, @ver_80211n={0x0, 0x41, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x5, 0x80}}, @void, @void}}}, 0x23)
syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@device_b, {0x6, 0x2}}, @tdls_setup_resp={0xc, 0x1, 0x50, 0x81, @val=0x10, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0xafcc, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x2, 0x40}}, @void}}, 0x3b)

18:21:53 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xfeff000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2275.614770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2275.646803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:53 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010b80)=ANY=[@ANYBLOB="756d61736b3d303030300730303030303030303030303030300000e000ac636f6465706167653d3933362c00"])
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000600)=@tipc, &(0x7f0000000680)=0x80)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r2, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1100)
setresuid(0x0, r4, 0x0)
r5 = gettid()
tgkill(0x0, r5, 0x80000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r7, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r5, 0x6})
setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {}, [{0x2, 0x4, r0}, {0x2, 0x5, 0xee00}, {0x2, 0x1, r1}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0xee00}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x0, r3}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x1, r4}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x4, 0xee00}, {0x8, 0x1, r7}, {0x8, 0x5}, {0x8, 0x6}], {0x10, 0x2}}, 0x94, 0x1)
r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c)
ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

[ 2275.674535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2275.705533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:21:53 executing program 1:
msgsnd(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4e250b8aa1c7"], 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/166}, 0xae, 0x2, 0x1000)
msgrcv(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa1, 0x3, 0x3000)
r0 = msgget$private(0x0, 0x100)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d45e4d6dbd382b146a25ed12f50c20a9cebe4fdff0e68208baf1e67711f78d7c421625245e79fe963e2ae8f98bd8ffd5919b07193bf74bf74833976e34c8ed28346b4c993c2be1b7a0664f236c980bb5b38767658d6ba86930e26f7e6cdb519531c69453c18e6b83c06940b42d52fe3779"}, 0x79, 0x800)

[ 2275.742587] msdos: Bad value for 'umask'
[ 2275.793829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2276.748253] Bluetooth: hci6: command 0x0406 tx timeout
18:22:04 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x0)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:22:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x1008, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:22:04 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/126}, 0x86, 0x2, 0x2000)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="eaffffffffffffff"], 0x8, 0x0)

18:22:04 executing program 7:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@broadcast, {0x5, 0x6}}, 0x9000, 0x8000, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xb7, "1e82a267ea5432841e4c8c7bedfe3d6bf37f4befff68f43fb3ca6994c3721c131f7941df472da616c8d637fb2dd66fb7e727bca947d7fbfaa6024f05296d44a1a4cb5380dcaaced151888216176748f212ce327975d169b40efb08c9ccd7bcbb5a8d73fae58cdf63465ead103167ec06f0cb61189c120cd36aaae640d5b6809ecce6d63402ff0401a6d6262a5c466c011a807b0e05a9879206d24a0dd6295b3e20f448b3d127c1ee7f075dc718e4e48c45346a3bda42b7"}]}, 0xdd)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000280)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x0, 0x5}}, @ver_80211n={0x0, 0x41, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x5, 0x80}}, @void, @void}}}, 0x23)
syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@device_b, {0x6, 0x2}}, @tdls_setup_resp={0xc, 0x1, 0x50, 0x81, @val=0x10, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0xafcc, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x2, 0x40}}, @void}}, 0x3b)

18:22:04 executing program 6:
syz_mount_image$msdos(&(0x7f00000104c0), &(0x7f0000010500)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000010b80)={[{@nodots}, {@fat=@codepage={'codepage', 0x3d, '437'}}]})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8444, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_mmap}, {@access_user}, {@debug={'debug', 0x3d, 0x10000}}, {@cache_loose}, {@afid={'afid', 0x3d, 0x40}}, {@cachetag={'cachetag', 0x3d, '&+*\\[%.]'}}], [{@subj_type={'subj_type', 0x3d, '}}.#+,(^.['}}, {@subj_type={'subj_type', 0x3d, '(!'}}]}})

18:22:04 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1}, 0x8, 0x0)
r1 = msgget$private(0x0, 0x8)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/120)
r2 = msgget(0x2, 0x10)
msgrcv(r2, &(0x7f0000000080)={0x0, ""/153}, 0xa1, 0x3, 0x3000)

18:22:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0x7462}}, './file0\x00'})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2f)
r3 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1, 0x8b, 0x81, 0x0, 0x0, 0x40008, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x49125, 0x1, 0xc000000, 0x1, 0xffffffffffffffff, 0x6, 0x3, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x2, 0x1, 0x2, 0x0, 0x0, 0xa113, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xfec, 0xb240}, 0x4000a, 0x8718, 0xe7, 0x4, 0xb65, 0x4, 0x8, 0x0, 0xfffffbff, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r6 = fork()
r7 = fork()
r8 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x28}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001)

18:22:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0xffff000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2286.405075] No source specified
[ 2286.415764] 9pnet_fd: Insufficient options for proto=fd
[ 2286.423226] No source specified
[ 2286.433021] 9pnet_fd: Insufficient options for proto=fd
[ 2286.434769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2286.437111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2286.527104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:22:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x1020, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:22:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x22, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2286.686982] 9pnet_fd: Insufficient options for proto=fd
[ 2286.694498] 9pnet_fd: Insufficient options for proto=fd
18:22:04 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x2c, r1}, 0x2c, {'wfdno', 0x3d, r0}})

18:22:04 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2286.799506] 9pnet_fd: Insufficient options for proto=fd
[ 2286.821641] 9pnet_fd: Insufficient options for proto=fd
18:22:05 executing program 0:
r0 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = gettid()
r3 = getpgid(r1)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42, 0x0)
kcmp(r3, r1, 0x1, r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x80, 0x4, 0xe, 0x40, 0x0, 0x1f, 0x200, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x7}, 0x40402, 0x7ff, 0xc8b, 0x5, 0x7fff, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1ff}, r2, 0xe, 0xffffffffffffffff, 0x0)
r5 = fork()
r6 = fork()
pidfd_open(r6, 0x0)
clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000)=<r7=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r1, r0, r0, r5, r0], 0x6}, 0x58)
preadv(r7, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/250, 0xfa}], 0x7, 0x9, 0x81)
clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r8, 0x0, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x80, 0x3, 0x9, 0x0, 0x752a594a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x400, 0x400}, 0x220, 0x4, 0x5fc3, 0x8, 0x2000000000049d, 0x1, 0x1, 0x0, 0xfffffeff, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
name_to_handle_at(r8, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00), 0x1000)

18:22:05 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x22, {'wfdno', 0x3d, r0}})

18:22:05 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x2010, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2286.957462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2287.002067] 9pnet_fd: Insufficient options for proto=fd
18:22:05 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x4, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x22, r0}})

18:22:05 executing program 5:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
read$ptp(r0, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080))
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x2f)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000003c0)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_b, @from_mac=@broadcast, {0xd, 0x3}}, 0x80, 0x3a, @random=0x1000, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x3, 0x0, {0x3f, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x4aa36dbd3a21c533, 0x6, 0x5}}, [{0xdd, 0x99, "4256783d5a389d80ca911e71859bb81b497e0c95a497b0c68b19d1c7950fc4dd65f44db091f1579837be92e8c5d414c1d0e8e868e17e88939976a1701a4b2850d8060c0dd8e0c5b1ed6f108f380583fe0556a5f54734eaab0daca3d7c8b410691e6db3a2625a3b366745d2622a90135e924f05671d58890b4927fcf419a4155f9a4ac9fab069cbc3a99f6abf8512a2c9fb659afb842b54f7eb"}, {0xdd, 0x3b, "0b6400f1e985d5b9e128982143981faeca000faa28e98088012ef6b26317758d086a998fd46fe4cb3e070e5f9a99b6cdf219a3218c5bedae0230ac"}, {0xdd, 0x1e, "ed3691b80c3772f69f2ad0e7982c9c874e65ae4f3fd65381fa13463c03f3"}, {0xdd, 0xc6, "3aa29599f5f398518998229c529de89b27b603696d632fc82844b0ab2bbd44a18c826f817a7ced5553194be3d639dae3753b36ac8fb8350640015ddf28ff7e304b7f812a2814c0b9961d6ed2905a085bd7ce8e183603a5f7d44af917efa2f98d580e5be8031ca88929852514548ca96d7de03221f8533b6d3e86c7bdf6c36289c4d585b91271cc6c641133680d61c4825ff5bb3b101d3c916253abb1d5babbef4352e83541b427ae6d2955a530b74a023e83a455a775153741a54472c3676a6c42948ec20ba4"}, {0xdd, 0xf7, "3ee69741503ed93658cf7ee349fa990ca8cac5580ae55c70a9cc7ed3728b3990f828b27656b2e6cbb646cae879d85f89cffe9d8c613cbde8fb0b34e1665e4008bff28a5753abf4e3b2178443cf1707b06a6b27e9d917a137f66fc393058337eb3029cdf0fc6a41e6e56cf446225819d17a857ab40f1106a1c6123183663f1c84b802c67a051290d33937ca90b8d18f56e1dad20488431ac49f6b2f5b8d7ce2510ce779e180c16b13f4c7763281283d2dc036eb9f6d5d70038da51087eda0ebff30dd60f5b4564b4f99e94789fa5a344de29ac6018303359daa1d0c13172a4a6943185c9f45cb4b2848d5e63b98591df5a21400b2dd5b21"}, {0xdd, 0x52, "0e741429b7999be07ada083acc96d3a7ed555ba9f4ac60c8f2e0694c33f3da6d2e192d12f54a76748e6ef775a4e2834b967a380c87bebb4c209ec5e920f12fb638b36d4f9141b26720e02581ea88e90bb65d"}, {0xdd, 0xdb, "4236b6a5ed6fc839fd4e4ca758b2b3e245b879cbc28290e59350999150eff2313a1bdc3ba1cbeaa0d39ef2a4663dc282e9b812b2173b5d77b4f005e88405605262c0bbf51357344d3369d32cbe28095a27787d2c70ec246ad0c708d9938a55a52701b8123626214eed827541f31fd77c5778a40d257a50d3ac393934c8bdf3e1ec5c10055f73e4a1cad0c3115b49b3f052bcb52a210adeda032cc3530fb90efe94635a07ff98d2235a8331d902e32183a31ab6688d5c4bd902fd148d62af82683d6159d63e3c92ffa21b8db95e22c70d05dfc8d554a5ecab29af15"}]}, 0x424)

18:22:05 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r2 = eventfd2(0x0, 0x0)
dup3(r2, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[ 2287.194549] 9pnet_fd: Insufficient options for proto=fd
[ 2287.210032] 9pnet_fd: Insufficient options for proto=fd
[ 2287.242871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2287.265453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2287.270879] kernel write not supported for file [eventfd] (pid: 32043 comm: kworker/1:0)
[ 2287.596568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2287.602288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2289.685446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2289.687680] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2289.691275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2289.698452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2289.701700] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2291.724079] Bluetooth: hci5: command tx timeout
[ 2293.772094] Bluetooth: hci5: command tx timeout
[ 2295.821375] Bluetooth: hci5: command tx timeout
[ 2297.868024] Bluetooth: hci5: command tx timeout
[ 2307.800122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2307.801617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2307.849316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2307.850611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2308.184882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.200716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.213908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.226872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2411.916202] Bluetooth: hci5: command 0x0406 tx timeout

VM DIAGNOSIS:
18:27:08  Registers:
info registers vcpu 0
RAX=0000000000b61285 RBX=0000000000000000 RCX=ffffffff84b7f167 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c6f94 RBP=dffffc0000000000 RSP=ffffffff85a07e00
R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001
R12=ffffffff86439250 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84b7de9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f1000 00000000 00000000
LDT=0000 fffffe2500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564a319fa038 CR3=000000000cbdf000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=1a7ed6439d6eac06000000000014fc20 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=3c8f2bc93dbd215e00000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000fb8019 RBX=0000000000000001 RCX=ffffffff84b7f167 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c6f94 RBP=dffffc0000000000 RSP=ffff888009717e58
R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001
R12=ffffffff86439250 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84b7de9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f1000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8ab39f1010 CR3=000000000fbeb000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=ffffffffffff0f0e0d0c0b0a09080706 XMM03=00000000000003010000656369767265
XMM04=00000000000000000000000000000000 XMM05=0000000600000008000055e45195f860
XMM06=697665642e3030323a356963682d3569 XMM07=00000000000000000000000000000000
XMM08=732f6563696c732e6d65747379732f3a XMM09=00000000000000000000000000000000
XMM10=00002000200000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000