000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB])
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:37:43 executing program 3:
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x8811)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:37:43 executing program 4:
r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21)

12:37:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x7fffffff, 0x6, 0x80000001, 0x1f}, 0x10)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:37:43 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035a8313f775d94e3b1b2471315506c093ba869053ed220f74bbc2f83e3911fc6275cea10e318057ec3d499dda0f6eb719b41a49b53d157e599d7d9", 0x74, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:37:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103bb000000000000001100000008000e"], 0x1c}}, 0x0)

12:37:43 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7920, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:37:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x7fffffff, 0x6, 0x80000001, 0x1f}, 0x10)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:37:53 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:37:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB])
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:37:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035a8313f775d94e3b1b2471315506c093ba869053ed220f74bbc2f83e3911fc6275cea10e318057ec3d499dda0f6eb719b41a49b53d157e599d7d9", 0x74, 0x3}, {&(0x7f0000000200), 0x0, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:37:53 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f, 0x5}, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:37:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103f0000000000000001100000008000e"], 0x1c}}, 0x0)

12:37:53 executing program 4:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21)

12:37:53 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7921, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:37:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x7fffffff, 0x6, 0x80000001, 0x1f}, 0x10)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:37:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300090000000000001100000008000e"], 0x1c}}, 0x0)

12:37:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x7fffffff, 0x6, 0x80000001, 0x1f}, 0x10)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:37:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB])
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:37:53 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:06 executing program 4:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21)

12:38:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103c00e0000000000001100000008000e"], 0x1c}}, 0x0)

12:38:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f, 0x5}, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB])
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7922, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x7fffffff, 0x6, 0x80000001, 0x1f}, 0x10)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:06 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035a8313f775d94e3b1b2471315506c093ba869053ed220f74bbc2f83e3911fc6275cea10e318057ec3d499dda0f6eb719b41a49b53d157e599d7d9", 0x74, 0x3}, {&(0x7f0000000200), 0x0, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:07 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035a8313f775d94e3b1b2471315506c093ba869053ed220f74bbc2f83e3911fc6275cea10e318057ec3d499dda0f6eb719b41a49b53d157e599d7d9", 0x74, 0x3}, {&(0x7f0000000200), 0x0, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:07 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
socket$nl_sock_diag(0x10, 0x3, 0x4)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:07 executing program 3:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7923, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000f0000000000001100000008000e"], 0x1c}}, 0x0)

12:38:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035a8313f775d94e3b1b2471315506c093ba869053ed220f74bbc2f83e3911fc6275cea10e318057ec3d499dda0f6eb719b41a49b53d157e599d7d9", 0x74, 0x3}, {&(0x7f0000000200)="d9", 0x1}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:07 executing program 4:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21)

12:38:07 executing program 3:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035a8313f775d94e3b1b2471315506c093ba869053ed220f74bbc2f83e3911fc6275cea10e318057ec3d499dda0f6eb719b41a49b53d157e599d7d9", 0x74, 0x3}, {&(0x7f0000000200)="d9", 0x1}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:17 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:17 executing program 4:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)

12:38:17 executing program 3:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:17 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f, 0x5}, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103001c0000000000001100000008000e"], 0x1c}}, 0x0)

12:38:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7924, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:17 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:17 executing program 4:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)

12:38:17 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7925, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035a8313f775d94e3b1b2471315506c093ba869053ed220f74bbc2f83e3911fc6275cea10e318057ec3d499dda0f6eb719b41a49b53d157e599d7d9", 0x74, 0x3}, {&(0x7f0000000200)="d9", 0x1}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300bb0000000000001100000008000e"], 0x1c}}, 0x0)

12:38:17 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:28 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f00000023c0)=[{&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:28 executing program 4:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)

12:38:28 executing program 2:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:28 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030ec00000000000001100000008000e"], 0x1c}}, 0x0)

12:38:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7926, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:28 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7927, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7928, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f00000023c0)=[{&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:28 executing program 2:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:28 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:28 executing program 4:
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x8811)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f00000023c0)=[{&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:36 executing program 5:
open(0x0, 0xc84c0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:36 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f00004a0000/0x3000)=nil, 0x2000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7f, 0x1, 0xff, 0x7f, 0x0, 0x1cf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x810, 0x8, 0x101, 0x9, 0x80000001, 0x8, 0x6, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x2, r2, 0x0)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mlock(&(0x7f000080c000/0x2000)=nil, 0x2000)

12:38:36 executing program 2:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:36 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300f00000000000001100000008000e"], 0x1c}}, 0x0)

12:38:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7929, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:36 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:36 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r1 = shmget(0x1, 0x4000, 0x78000000, &(0x7f0000c38000/0x4000)=nil)
shmat(r1, &(0x7f000086e000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
write$vga_arbiter(r6, &(0x7f0000000040), 0xf)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000080)={0x1, {{0xa, 0x4e23, 0x1000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x1}}, {{0xa, 0x4e22, 0x7, @local, 0x7b43}}}, 0x108)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r8)
remap_file_pages(&(0x7f0000b06000/0xf000)=nil, 0xf000, 0x9, 0x80, 0xc2000)

12:38:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x792a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000800000000001100000008000e"], 0x1c}}, 0x0)

12:38:36 executing program 2:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:38:36 executing program 5:
open(0x0, 0xc84c0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:36 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:36 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{0x0, 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:36 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:36 executing program 2:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000563000/0x3000)=nil)

12:38:47 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x792b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:47 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{0x0, 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:47 executing program 1:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103fffff000000000001100000008000e"], 0x1c}}, 0x0)

12:38:47 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00')

12:38:47 executing program 5:
open(0x0, 0xc84c0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:47 executing program 2:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000563000/0x3000)=nil)

12:38:47 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:47 executing program 2:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000563000/0x3000)=nil)

12:38:47 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5007)

[ 1437.090996] Bluetooth: hci7: command 0x0406 tx timeout
12:38:56 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:56 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x792c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000001000000001100000008000e"], 0x1c}}, 0x0)

12:38:56 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0x0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{0x0, 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:56 executing program 1:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:56 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4813, r0, 0xe988000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

12:38:56 executing program 4:
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="100800000400000002000046a2763980ebd5a2d687085f56621cdfa1ffffff0000008000000000"], &(0x7f0000000080), 0x1400)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000903000/0x3000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000489000/0x4000)=nil, 0x2000)
mbind(&(0x7f000092e000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000280)=0x9, 0x400, 0x2)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x800, 0x0, 0x11}, 0x18)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0x1f, 0x0, 0xfb, 0x0, 0x8001, 0x40009, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x2, 0x200, 0x0, 0x9, 0x80000001, 0x3, 0x0, 0x6, 0x0, 0x75ba}, 0x0, 0x2, r2, 0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="ffffffff000800002e2f66696c6530003ba978042fcbe63e07dedda83218f61f83488cdbf359cc9d36eaee8fa4114ed4e2cea492d5cbc8d2638b50ffdd0f76cf31601a1fac6e3f2f5953f775cc46b6ab99378ccb94a01a7072a811f17390a982021e1f417595638d2ba948bf6a6c288e6f2cbfb991fc510f71936cca490102a8f584283f2c2c6090adb6e495505914"])
write$P9_RREADDIR(r3, &(0x7f0000000100)={0x68, 0x29, 0x2, {0x0, [{{0x10, 0x4, 0x6}, 0x7, 0x3, 0x7, './file0'}, {{0x40, 0x0, 0x5}, 0x7, 0x0, 0x7, './file0'}, {{0x40, 0x1, 0x3}, 0xffffffff, 0xbe, 0x7, './file0'}]}}, 0x68)

12:38:57 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x900)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000002000000001100000008000e"], 0x1c}}, 0x0)

12:38:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x792d, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:57 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r1 = shmget(0x2, 0x2000, 0x400, &(0x7f0000794000/0x2000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e713d66642c7266646e4f3dae8962426d8c3cd9e8163a934a9e42623069085419e9f6a80621039383e55534160651377f171e09ec6123e482c9e52a80ccfb478d242dcb8be969995701a1b1a91910f9da41", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00'])
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x30002002})
shmat(r1, &(0x7f00008de000/0x1000)=nil, 0x6000)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)={0x30000018})

12:38:57 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0x0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x7, 0x9, 0x67, 0x0, 0x7fffffff, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x49, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x100, 0xfffdfffffffffff7, 0x80000001, 0x7, 0x1400000000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x100000001}, 0x0, 0x7, r0, 0x9)
shmat(r2, &(0x7f0000f68000/0x2000)=nil, 0x7000)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)

12:38:57 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:38:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:38:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:38:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000004000000001100000008000e"], 0x1c}}, 0x0)

12:38:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x792e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:57 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0x0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:38:57 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)

12:39:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)

12:39:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:06 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:39:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000009000000001100000008000e"], 0x1c}}, 0x0)

12:39:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x792f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:06 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:06 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:39:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x1, 0x7, 0x6, 0xffff, 0x1, [{0x82, 0x200, 0x7, '\x00', 0x2001}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)

12:39:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000f000000001100000008000e"], 0x1c}}, 0x0)

12:39:06 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:39:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035", 0x3a, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7930, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:06 executing program 4:
chmod(&(0x7f0000000000)='./file0\x00', 0x10)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f860a5a22b63748c4a1014d0539f9a", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1b61"])
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0/file0', [{0x20, '$'}, {0x20, '!'}, {}, {0x20, '[,:]'}, {0x20, '+-'}, {0x20, '{.)+'}, {0x20, '\xb5&(}(+-'}, {0x20, '-&+!}.*[)\xb7)'}, {0x20, '/'}], 0xa, "1cfc0262188919c5680ab91b4a1da19be3b2a9b3a5530e0172b7e68ad03b780d8174fa4a9b743412a5f01c164bc17f01fff93d945a62bc0523b18d352c97dc63d52c19d537e7e8aeab0fda5a1de07da6e130fe6f163b234151a9be4afec444a53db89aad767f9dc22b0ea72570781ca334aa32a57a36bf55cf148691f84ce82205fe89936d061431af59a75f0faf8876b6ea49268e95b28bc765125fa5d89f5d3730143efd49b0b86f"}, 0xe2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, ')(,.$\xbf&'}, {0x20, '\xb5&(}(+-'}, {0x20, '\xb5&(}(+-'}, {}, {0x20, '\xc4]'}, {0x20, '/'}, {0x20, '%'}, {0x20, ','}], 0xa, "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"}, 0x12c)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000001340)={{r5}, "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"})
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

12:39:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x1, 0x7, 0x6, 0xffff, 0x1, [{0x82, 0x200, 0x7, '\x00', 0x2001}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)

12:39:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7931, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035", 0x3a, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x1, 0x7, 0x6, 0xffff, 0x1, [{0x82, 0x200, 0x7, '\x00', 0x2001}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)

12:39:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001100000008000e"], 0x1c}}, 0x0)

12:39:18 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:18 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7932, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:18 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x1, 0x7, 0x6, 0xffff, 0x1, [{0x82, 0x200, 0x7, '\x00', 0x2001}]})
socket$inet_tcp(0x2, 0x1, 0x0)

12:39:18 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

12:39:18 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000001c000000001100000008000e"], 0x1c}}, 0x0)

12:39:18 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95df8ced46988bf0b5d52989b1f9238b1ac7fff90402998252be57749035", 0x3a, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:18 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x56}, 0x100, 0x0, 0x6})

[ 1466.447533] 9pnet_fd: Insufficient options for proto=fd
12:39:18 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:18 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:18 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7933, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103ffffff9e000000001100000008000e"], 0x1c}}, 0x0)

12:39:26 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5003)

12:39:26 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000bb000000001100000008000e"], 0x1c}}, 0x0)

12:39:26 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x1, 0x7, 0x6, 0xffff, 0x1, [{0x82, 0x200, 0x7, '\x00', 0x2001}]})
socket$inet_tcp(0x2, 0x1, 0x0)

12:39:26 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7934, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:26 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0)

12:39:26 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:39:26 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1474.541279] 9pnet_fd: Insufficient options for proto=fd
12:39:26 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:26 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000ec0000000001100000008000e"], 0x1c}}, 0x0)

12:39:26 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0)

12:39:26 executing program 4:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, 0x0, 0x1000000, 0x0)

12:39:26 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 1474.776362] 9pnet_fd: Insufficient options for proto=fd
12:39:35 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7935, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0x0)

12:39:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
ioctl$FICLONE(r0, 0x40049409, r0)

12:39:35 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:35 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x1, 0x7, 0x6, 0xffff, 0x1, [{0x82, 0x200, 0x7, '\x00', 0x2001}]})

12:39:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657194cf1ecf78c8cb78b3870d45b95", 0x1d, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:35 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0)

12:39:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103fffffff0000000001100000008000e"], 0x1c}}, 0x0)

12:39:35 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil) (fail_nth: 1)

12:39:35 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {0x56}, 0x100, 0x0, 0x6})

12:39:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0x0)

[ 1483.293464] 9pnet_fd: Insufficient options for proto=fd
[ 1483.367033] FAULT_INJECTION: forcing a failure.
[ 1483.367033] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1483.368265] CPU: 0 UID: 0 PID: 11651 Comm: syz-executor.4 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1483.368281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1483.368289] Call Trace:
[ 1483.368294]  <TASK>
[ 1483.368298]  dump_stack_lvl+0xfa/0x120
[ 1483.368323]  should_fail_ex+0x4d7/0x5e0
[ 1483.368346]  _copy_to_user+0x32/0xd0
[ 1483.368361]  simple_read_from_buffer+0xe0/0x180
[ 1483.368382]  proc_fail_nth_read+0x18a/0x240
[ 1483.368396]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1483.368409]  ? security_file_permission+0x22/0x90
[ 1483.368429]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1483.368441]  vfs_read+0x1eb/0xbe0
[ 1483.368457]  ? __pfx_vfs_read+0x10/0x10
[ 1483.368470]  ? lock_release+0xc8/0x290
[ 1483.368488]  ? __fget_files+0x20d/0x3b0
[ 1483.368514]  ksys_read+0x121/0x240
[ 1483.368525]  ? __pfx_ksys_read+0x10/0x10
[ 1483.368538]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1483.368554]  do_syscall_64+0xbf/0x360
[ 1483.368574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.368587] RIP: 0033:0x7f2fbfd0469c
[ 1483.368597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1483.368608] RSP: 002b:00007f2fbd2c7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1483.368619] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f2fbfd0469c
[ 1483.368627] RDX: 000000000000000f RSI: 00007f2fbd2c71e0 RDI: 0000000000000003
[ 1483.368634] RBP: 00007f2fbd2c71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1483.368641] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1483.368648] R13: 00007ffc143b9e5f R14: 00007f2fbd2c7300 R15: 0000000000022000
[ 1483.368667]  </TASK>
12:39:45 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:45 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:45 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x100, 0x0, 0x6})

12:39:45 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:39:45 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7936, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:45 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0x0)

12:39:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300f0ffff000000001100000008000e"], 0x1c}}, 0x0)

12:39:45 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

[ 1493.857394] 9pnet_fd: Insufficient options for proto=fd
12:39:46 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1002, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:39:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:46 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7937, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:46 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x100, 0x0, 0x6})

12:39:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

12:39:46 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:39:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01037fffffff000000001100000008000e"], 0x1c}}, 0x0)

12:39:46 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1494.149830] 9pnet_fd: Insufficient options for proto=fd
12:39:46 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x100, 0x0, 0x6})

12:39:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:46 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1003, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:39:46 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:39:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

12:39:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01039effffff000000001100000008000e"], 0x1c}}, 0x0)

12:39:57 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {0x56}, 0x0, 0x0, 0x6})

12:39:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

12:39:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7938, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:57 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:39:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a612ed3bde0350657", 0xf, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:39:57 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:39:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103f0ffffff000000001100000008000e"], 0x1c}}, 0x0)

12:39:57 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:39:57 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x56000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:07 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {0x56}, 0x0, 0x0, 0x6})

12:40:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xc084, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)

12:40:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3002, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:07 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000008001100000008000e"], 0x1c}}, 0x0)

12:40:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3003, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1515.413928] Zero length message leads to an empty skb
12:40:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:07 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)

12:40:07 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {0x56}, 0x0, 0x0, 0x6})

12:40:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x7fffdfa9c000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:07 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103fffffffffffff0001100000008000e"], 0x1c}}, 0x0)

12:40:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:16 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:16 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:16 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:16 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)

12:40:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:16 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {0x56}, 0x100})

12:40:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000011100000008000e"], 0x1c}}, 0x0)

12:40:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:16 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:40:16 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:16 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:16 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000563000/0x3000)=nil)

12:40:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000021100000008000e"], 0x1c}}, 0x0)

12:40:16 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a61", 0x8, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:17 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:40:26 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:26 executing program 2:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:26 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0xb, &(0x7f0000563000/0x3000)=nil)

12:40:26 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x40000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:26 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a61", 0x8, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:26 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000041100000008000e"], 0x1c}}, 0x0)

12:40:26 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:40:26 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0xf, &(0x7f0000563000/0x3000)=nil)

12:40:26 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:26 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:26 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:26 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfeffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:26 executing program 3:
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:26 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:40:35 executing program 3:
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:35 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r0)
shmat(0xffffffffffffffff, &(0x7f00005ee000/0x4000)=nil, 0x2000)
shmdt(r0)
shmctl$IPC_RMID(0x0, 0x0)
mremap(&(0x7f0000c0e000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000091100000008000e"], 0x1c}}, 0x0)

12:40:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:40:35 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1df0eb0b49058a61", 0x8, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:35 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:35 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:35 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:44 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:44 executing program 4:
munmap(&(0x7f0000715000/0x2000)=nil, 0x2000)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f00009dc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f00004e3000/0x3000)=nil, 0x3000, 0x0)

12:40:44 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000f1100000008000e"], 0x1c}}, 0x0)

12:40:44 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, 0x0)

12:40:44 executing program 3:
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:44 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:40:44 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:40:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:44 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:44 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0xc4042, 0x0)

12:40:44 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:44 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000001c1100000008000e"], 0x1c}}, 0x0)

12:40:44 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0xc4042, 0x0)

12:40:44 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:40:44 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, 0x0)

12:40:44 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1)

12:40:44 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, 0x0)

12:40:44 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:44 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:44 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0xc4042, 0x0)

[ 1552.857712] FAULT_INJECTION: forcing a failure.
[ 1552.857712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1552.859965] CPU: 1 UID: 0 PID: 11910 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1552.860028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1552.860050] Call Trace:
[ 1552.860061]  <TASK>
[ 1552.860076]  dump_stack_lvl+0xfa/0x120
[ 1552.860140]  should_fail_ex+0x4d7/0x5e0
[ 1552.860210]  _copy_from_user+0x30/0xd0
[ 1552.860249]  copy_msghdr_from_user+0x88/0x150
[ 1552.860276]  ? __pfx_copy_msghdr_from_user+0x10/0x10
12:40:44 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000436000/0x3000)=nil, 0x2000)

[ 1552.860306]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1552.860339]  ? lock_acquire+0x15e/0x2f0
[ 1552.860369]  ___sys_sendmsg+0xdc/0x1b0
[ 1552.860395]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1552.860416]  ? perf_trace_lock+0xb5/0x5d0
[ 1552.860447]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1552.860470]  ? proc_fail_nth_write+0x97/0x220
[ 1552.860500]  ? lock_acquire+0x15e/0x2f0
[ 1552.860523]  ? __fget_files+0x34/0x3b0
[ 1552.860557]  ? find_held_lock+0x2b/0x80
[ 1552.860588]  ? __fget_files+0x203/0x3b0
[ 1552.860621]  ? lock_release+0xc8/0x290
[ 1552.860651]  ? __fget_files+0x20d/0x3b0
[ 1552.860697]  __sys_sendmsg+0x150/0x200
[ 1552.860722]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1552.860752]  ? fput+0x6a/0x100
[ 1552.860779]  ? ksys_write+0x1a3/0x240
[ 1552.860799]  ? __pfx_ksys_write+0x10/0x10
[ 1552.860834]  do_syscall_64+0xbf/0x360
[ 1552.860877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1552.860901] RIP: 0033:0x7fd6de217b19
[ 1552.860917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1552.860939] RSP: 002b:00007fd6db78d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1552.860960] RAX: ffffffffffffffda RBX: 00007fd6de32af60 RCX: 00007fd6de217b19
[ 1552.860975] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 1552.860988] RBP: 00007fd6db78d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1552.861002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1552.861014] R13: 00007ffd8c938b0f R14: 00007fd6db78d300 R15: 0000000000022000
[ 1552.861050]  </TASK>
12:40:45 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

[ 1552.986258] 9pnet_fd: Insufficient options for proto=fd
12:40:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2)

12:40:54 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:40:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000ffffff9e1100000008000e"], 0x1c}}, 0x0)

12:40:54 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:40:54 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

12:40:54 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:54 executing program 4:
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x7, 0x9a9})
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x4001, 0x40)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x13, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcae}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5c7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4090)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:40:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180), 0x0, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

[ 1562.767285] 9pnet_fd: Insufficient options for proto=fd
[ 1562.785588] FAULT_INJECTION: forcing a failure.
[ 1562.785588] name failslab, interval 1, probability 0, space 0, times 0
[ 1562.787301] CPU: 0 UID: 0 PID: 11941 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1562.787331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1562.787344] Call Trace:
[ 1562.787353]  <TASK>
[ 1562.787363]  dump_stack_lvl+0xfa/0x120
[ 1562.787408]  should_fail_ex+0x4d7/0x5e0
[ 1562.787460]  should_failslab+0xc2/0x120
[ 1562.787489]  kmem_cache_alloc_node_noprof+0x71/0x3e0
[ 1562.787528]  ? __alloc_skb+0x2ab/0x370
[ 1562.787574]  __alloc_skb+0x2ab/0x370
[ 1562.787602]  ? __pfx___alloc_skb+0x10/0x10
[ 1562.787641]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1562.787689]  netlink_alloc_large_skb+0x69/0x150
[ 1562.787723]  netlink_sendmsg+0x676/0xd80
[ 1562.787770]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1562.787838]  ____sys_sendmsg+0xa67/0xc20
[ 1562.787885]  ? copy_msghdr_from_user+0xfb/0x150
[ 1562.787912]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1562.787996]  ___sys_sendmsg+0x10f/0x1b0
[ 1562.788028]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1562.788050]  ? perf_trace_lock+0xb5/0x5d0
[ 1562.788094]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1562.788130]  ? proc_fail_nth_write+0x97/0x220
[ 1562.788169]  ? lock_acquire+0x15e/0x2f0
[ 1562.788194]  ? __fget_files+0x34/0x3b0
[ 1562.788231]  ? find_held_lock+0x2b/0x80
[ 1562.788265]  ? __fget_files+0x203/0x3b0
[ 1562.788301]  ? lock_release+0xc8/0x290
[ 1562.788342]  ? __fget_files+0x20d/0x3b0
[ 1562.788411]  __sys_sendmsg+0x150/0x200
[ 1562.788439]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1562.788498]  ? __pfx_ksys_write+0x10/0x10
[ 1562.788554]  do_syscall_64+0xbf/0x360
[ 1562.788596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1562.788620] RIP: 0033:0x7fd6de217b19
[ 1562.788638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1562.788659] RSP: 002b:00007fd6db78d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1562.788680] RAX: ffffffffffffffda RBX: 00007fd6de32af60 RCX: 00007fd6de217b19
[ 1562.788696] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 1562.788709] RBP: 00007fd6db78d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1562.788722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1562.788735] R13: 00007ffd8c938b0f R14: 00007fd6db78d300 R15: 0000000000022000
[ 1562.788800]  </TASK>
12:40:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000bb1100000008000e"], 0x1c}}, 0x0)

12:40:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:41:06 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000563000/0x3000)=nil)

12:41:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000000ec01100000008000e"], 0x1c}}, 0x0)

12:41:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:41:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:41:06 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

12:41:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3)

12:41:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:06 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x0)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:06 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000563000/0x3000)=nil)

12:41:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:41:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x7790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1574.328721] 9pnet_fd: Insufficient options for proto=fd
12:41:06 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000563000/0x3000)=nil)

12:41:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000fffffff01100000008000e"], 0x1c}}, 0x0)

12:41:06 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0xffffffffffffffff, &(0x7f0000f51000/0x4000)=nil, 0x5000)
shmat(0x0, &(0x7f0000990000/0x1000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:41:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4)

12:41:06 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}})

12:41:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1574.508444] 9pnet_fd: Insufficient options for proto=fd
12:41:06 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil) (fail_nth: 1)

12:41:06 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0xffffffffffffffff, &(0x7f000066d000/0x1000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
mremap(&(0x7f0000479000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f00005d4000/0x1000)=nil)
shmat(0x0, &(0x7f0000f47000/0x8000)=nil, 0x4000)

12:41:06 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}})

[ 1574.592261] FAULT_INJECTION: forcing a failure.
[ 1574.592261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1574.593312] CPU: 0 UID: 0 PID: 11994 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1574.593328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1574.593336] Call Trace:
[ 1574.593341]  <TASK>
[ 1574.593346]  dump_stack_lvl+0xfa/0x120
[ 1574.593374]  should_fail_ex+0x4d7/0x5e0
[ 1574.593397]  _copy_to_user+0x32/0xd0
[ 1574.593414]  simple_read_from_buffer+0xe0/0x180
[ 1574.593434]  proc_fail_nth_read+0x18a/0x240
[ 1574.593450]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1574.593463]  ? security_file_permission+0x22/0x90
[ 1574.593483]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1574.593496]  vfs_read+0x1eb/0xbe0
[ 1574.593512]  ? __pfx_vfs_read+0x10/0x10
[ 1574.593525]  ? lock_release+0xc8/0x290
[ 1574.593544]  ? __fget_files+0x20d/0x3b0
[ 1574.593571]  ksys_read+0x121/0x240
[ 1574.593582]  ? __pfx_ksys_read+0x10/0x10
[ 1574.593603]  do_syscall_64+0xbf/0x360
[ 1574.593624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1574.593637] RIP: 0033:0x7f1dc5fa069c
[ 1574.593647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1574.593659] RSP: 002b:00007f1dc3563170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1574.593671] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f1dc5fa069c
[ 1574.593679] RDX: 000000000000000f RSI: 00007f1dc35631e0 RDI: 0000000000000003
[ 1574.593686] RBP: 00007f1dc35631d0 R08: 0000000000000000 R09: 0000000000000000
[ 1574.593694] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1574.593701] R13: 00007fff7a3e21cf R14: 00007f1dc3563300 R15: 0000000000022000
[ 1574.593723]  </TASK>
12:41:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:41:06 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:06 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f00005bb000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x1f, 0x8, 0x0)
mremap(&(0x7f0000d94000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil)

[ 1574.704847] 9pnet_fd: Insufficient options for proto=fd
12:41:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000007fffffff1100000008000e"], 0x1c}}, 0x0)

12:41:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:41:17 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0xffffffffffffffff, &(0x7f0000be6000/0x3000)=nil, 0x0)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = shmget(0x1, 0x9000, 0x80, &(0x7f0000b7a000/0x9000)=nil)
shmat(r1, &(0x7f0000872000/0x3000)=nil, 0x0)
shmat(r0, &(0x7f0000ca8000/0x3000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 1)

12:41:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5)

12:41:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x8100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:17 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}})

12:41:17 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1585.056580] 9pnet_fd: Insufficient options for proto=fd
[ 1585.056628] FAULT_INJECTION: forcing a failure.
[ 1585.056628] name failslab, interval 1, probability 0, space 0, times 0
[ 1585.059555] CPU: 0 UID: 0 PID: 12024 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1585.059590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1585.059606] Call Trace:
[ 1585.059616]  <TASK>
[ 1585.059627]  dump_stack_lvl+0xfa/0x120
[ 1585.059678]  should_fail_ex+0x4d7/0x5e0
[ 1585.059734]  ? getname_flags.part.0+0x48/0x540
[ 1585.059767]  should_failslab+0xc2/0x120
[ 1585.059800]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1585.059838]  ? lock_is_held_type+0x9e/0x120
[ 1585.059890]  ? find_held_lock+0x2b/0x80
[ 1585.059947]  getname_flags.part.0+0x48/0x540
[ 1585.059996]  getname_flags+0x95/0xe0
[ 1585.060043]  do_sys_openat2+0x9f/0x1b0
[ 1585.060081]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1585.060129]  ? __fget_files+0x20d/0x3b0
[ 1585.060199]  __x64_sys_openat+0x142/0x200
[ 1585.060237]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1585.060269]  ? ksys_write+0x1a3/0x240
[ 1585.060316]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1585.060377]  do_syscall_64+0xbf/0x360
[ 1585.060426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1585.060454] RIP: 0033:0x7f2a74959b19
[ 1585.060474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1585.060498] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1585.060522] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1585.060539] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1585.060556] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1585.060571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1585.060586] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1585.060660]  </TASK>
12:41:28 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6)

12:41:28 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 2)

12:41:28 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1)

12:41:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300f0ffffffffffff1100000008000e"], 0x1c}}, 0x0)

12:41:28 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3003, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e74d3e791a796603f71652c61707072616973652c636f6e746578743d756e636f6e66696e65645f752c00"])

12:41:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x8790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:28 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000fdc000/0x4000)=nil)
shmat(r0, &(0x7f0000dbe000/0x3000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mmap(&(0x7f0000425000/0x4000)=nil, 0x4000, 0x3000008, 0x10010, 0xffffffffffffffff, 0x53566000)

12:41:28 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2)

12:41:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000e"], 0x1c}}, 0x0)

[ 1596.091612] FAULT_INJECTION: forcing a failure.
[ 1596.091612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1596.093447] CPU: 0 UID: 0 PID: 12042 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1596.093478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1596.093491] Call Trace:
[ 1596.093500]  <TASK>
[ 1596.093510]  dump_stack_lvl+0xfa/0x120
[ 1596.093558]  should_fail_ex+0x4d7/0x5e0
[ 1596.093610]  _copy_from_iter+0x1dc/0x15b0
[ 1596.093640]  ? lock_acquire+0x15e/0x2f0
[ 1596.093667]  ? __virt_addr_valid+0x1c6/0x5d0
[ 1596.093703]  ? find_held_lock+0x2b/0x80
[ 1596.093742]  ? __pfx__copy_from_iter+0x10/0x10
[ 1596.093763]  ? lock_release+0xc8/0x290
[ 1596.093809]  ? __virt_addr_valid+0x100/0x5d0
[ 1596.093849]  ? __check_object_size+0x57b/0x880
[ 1596.093909]  netlink_sendmsg+0x809/0xd80
[ 1596.093957]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1596.094026]  ____sys_sendmsg+0xa67/0xc20
[ 1596.094065]  ? copy_msghdr_from_user+0xfb/0x150
[ 1596.094093]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1596.094176]  ___sys_sendmsg+0x10f/0x1b0
[ 1596.094207]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1596.094229]  ? perf_trace_lock+0xb5/0x5d0
[ 1596.094272]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1596.094295]  ? proc_fail_nth_write+0x97/0x220
[ 1596.094333]  ? lock_acquire+0x15e/0x2f0
[ 1596.094358]  ? __fget_files+0x34/0x3b0
[ 1596.094395]  ? find_held_lock+0x2b/0x80
[ 1596.094428]  ? __fget_files+0x203/0x3b0
[ 1596.094464]  ? lock_release+0xc8/0x290
[ 1596.094505]  ? __fget_files+0x20d/0x3b0
[ 1596.094575]  __sys_sendmsg+0x150/0x200
[ 1596.094602]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1596.094660]  ? __pfx_ksys_write+0x10/0x10
[ 1596.094716]  do_syscall_64+0xbf/0x360
[ 1596.094758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1596.094782] RIP: 0033:0x7fd6de217b19
[ 1596.094800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1596.094821] RSP: 002b:00007fd6db78d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1596.094842] RAX: ffffffffffffffda RBX: 00007fd6de32af60 RCX: 00007fd6de217b19
[ 1596.094857] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 1596.094870] RBP: 00007fd6db78d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1596.094883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1596.094896] R13: 00007ffd8c938b0f R14: 00007fd6db78d300 R15: 0000000000022000
[ 1596.094960]  </TASK>
12:41:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:41:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:28 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x56000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000200000008000e"], 0x1c}}, 0x0)

12:41:28 executing program 4:
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:28 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 3)

12:41:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x9790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:28 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7)

[ 1596.319652] FAULT_INJECTION: forcing a failure.
[ 1596.319652] name failslab, interval 1, probability 0, space 0, times 0
[ 1596.320771] CPU: 1 UID: 0 PID: 12069 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1596.320787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1596.320795] Call Trace:
[ 1596.320799]  <TASK>
[ 1596.320804]  dump_stack_lvl+0xfa/0x120
[ 1596.320832]  should_fail_ex+0x4d7/0x5e0
[ 1596.320857]  should_failslab+0xc2/0x120
[ 1596.320876]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1596.320896]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 1596.320916]  ? genl_start+0x1e8/0x960
[ 1596.320934]  genl_start+0x1e8/0x960
[ 1596.320953]  __netlink_dump_start+0x5fd/0x980
[ 1596.320971]  genl_family_rcv_msg_dumpit+0x1b6/0x2b0
[ 1596.320988]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 1596.321011]  ? __pfx_genl_get_cmd+0x10/0x10
[ 1596.321025]  ? __pfx_genl_start+0x10/0x10
[ 1596.321038]  ? __pfx_genl_dumpit+0x10/0x10
[ 1596.321052]  ? __pfx_genl_done+0x10/0x10
[ 1596.321069]  ? __radix_tree_lookup+0x1f7/0x290
[ 1596.321093]  genl_rcv_msg+0x447/0x7e0
[ 1596.321112]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1596.321128]  ? __pfx_nl80211_dump_station+0x10/0x10
[ 1596.321157]  netlink_rcv_skb+0x147/0x430
[ 1596.321172]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1596.321189]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1596.321213]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1596.321225]  ? selinux_netlink_send+0x507/0x880
[ 1596.321238]  ? is_vmalloc_addr+0x86/0xa0
[ 1596.321260]  genl_rcv+0x28/0x40
[ 1596.321273]  netlink_unicast+0x5a7/0x870
[ 1596.321290]  ? __pfx_netlink_unicast+0x10/0x10
[ 1596.321313]  netlink_sendmsg+0x8ac/0xd80
[ 1596.321331]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1596.321354]  ____sys_sendmsg+0xa67/0xc20
[ 1596.321374]  ? copy_msghdr_from_user+0xfb/0x150
[ 1596.321388]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1596.321412]  ? lock_acquire+0x15e/0x2f0
[ 1596.321430]  ___sys_sendmsg+0x10f/0x1b0
[ 1596.321445]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1596.321459]  ? perf_trace_lock+0xb5/0x5d0
[ 1596.321480]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1596.321493]  ? proc_fail_nth_write+0x97/0x220
[ 1596.321509]  ? lock_acquire+0x15e/0x2f0
[ 1596.321522]  ? __fget_files+0x34/0x3b0
[ 1596.321542]  ? find_held_lock+0x2b/0x80
[ 1596.321559]  ? __fget_files+0x203/0x3b0
[ 1596.321578]  ? lock_release+0xc8/0x290
[ 1596.321594]  ? __fget_files+0x20d/0x3b0
[ 1596.321621]  __sys_sendmsg+0x150/0x200
[ 1596.321634]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1596.321656]  ? __pfx_ksys_write+0x10/0x10
[ 1596.321676]  do_syscall_64+0xbf/0x360
[ 1596.321696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1596.321709] RIP: 0033:0x7fd6de217b19
[ 1596.321719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1596.321731] RSP: 002b:00007fd6db78d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1596.321743] RAX: ffffffffffffffda RBX: 00007fd6de32af60 RCX: 00007fd6de217b19
[ 1596.321752] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 1596.321759] RBP: 00007fd6db78d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1596.321767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1596.321773] R13: 00007ffd8c938b0f R14: 00007fd6db78d300 R15: 0000000000022000
[ 1596.321793]  </TASK>
[ 1596.348072] FAULT_INJECTION: forcing a failure.
[ 1596.348072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1596.349635] CPU: 0 UID: 0 PID: 12072 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1596.349661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1596.349673] Call Trace:
[ 1596.349682]  <TASK>
[ 1596.349691]  dump_stack_lvl+0xfa/0x120
[ 1596.349735]  should_fail_ex+0x4d7/0x5e0
[ 1596.349781]  strncpy_from_user+0x3b/0x2f0
[ 1596.349821]  getname_flags.part.0+0x8d/0x540
[ 1596.349862]  getname_flags+0x95/0xe0
[ 1596.349904]  do_sys_openat2+0x9f/0x1b0
[ 1596.349934]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1596.349970]  ? __fget_files+0x20d/0x3b0
[ 1596.350024]  __x64_sys_openat+0x142/0x200
[ 1596.350056]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1596.350082]  ? ksys_write+0x1a3/0x240
[ 1596.350117]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1596.350154]  do_syscall_64+0xbf/0x360
[ 1596.350192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1596.350214] RIP: 0033:0x7f2a74959b19
[ 1596.350230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1596.350249] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1596.350268] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1596.350281] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1596.350294] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1596.350306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1596.350318] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1596.350375]  </TASK>
12:41:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000e"], 0x1c}}, 0x0)

12:41:39 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x7fffdfa9c000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:39 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:39 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000e"], 0x1c}}, 0x0)

12:41:39 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8)

12:41:39 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 4)

12:41:39 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f00006c6000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ee4000/0x2000)=nil)

12:41:39 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xa790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:39 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000600000008000e"], 0x1c}}, 0x0)

[ 1607.314062] FAULT_INJECTION: forcing a failure.
[ 1607.314062] name failslab, interval 1, probability 0, space 0, times 0
[ 1607.315138] CPU: 0 UID: 0 PID: 12086 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1607.315156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1607.315166] Call Trace:
[ 1607.315171]  <TASK>
[ 1607.315178]  dump_stack_lvl+0xfa/0x120
[ 1607.315215]  should_fail_ex+0x4d7/0x5e0
[ 1607.315246]  ? alloc_empty_file+0x58/0x1e0
[ 1607.315264]  should_failslab+0xc2/0x120
[ 1607.315282]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1607.315303]  ? __is_insn_slot_addr+0x140/0x290
[ 1607.315331]  ? kernel_text_address+0x5b/0xc0
[ 1607.315354]  alloc_empty_file+0x58/0x1e0
[ 1607.315377]  path_openat+0xe0/0x2880
[ 1607.315392]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1607.315413]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1607.315450]  ? __pfx_path_openat+0x10/0x10
[ 1607.315461]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1607.315499]  do_filp_open+0x1e8/0x450
[ 1607.315513]  ? __pfx_do_filp_open+0x10/0x10
[ 1607.315549]  ? find_held_lock+0x2b/0x80
[ 1607.315571]  ? alloc_fd+0x2c1/0x560
[ 1607.315593]  ? lock_release+0xc8/0x290
[ 1607.315618]  ? _raw_spin_unlock+0x1e/0x40
[ 1607.315635]  ? alloc_fd+0x2c1/0x560
[ 1607.315677]  do_sys_openat2+0x104/0x1b0
[ 1607.315698]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1607.315723]  ? __fget_files+0x20d/0x3b0
[ 1607.315760]  __x64_sys_openat+0x142/0x200
[ 1607.315780]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1607.315796]  ? ksys_write+0x1a3/0x240
[ 1607.315821]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1607.315846]  do_syscall_64+0xbf/0x360
[ 1607.315877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.315892] RIP: 0033:0x7f2a74959b19
[ 1607.315903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1607.315915] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1607.315928] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1607.315937] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1607.315946] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1607.315954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1607.315962] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1607.316002]  </TASK>
12:41:39 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000e"], 0x1c}}, 0x0)

12:41:39 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 5)

12:41:39 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x7ffffffff000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:39 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:39 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000700000008000e"], 0x1c}}, 0x0)

12:41:39 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:39 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9)

12:41:39 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3002, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1607.661231] FAULT_INJECTION: forcing a failure.
[ 1607.661231] name failslab, interval 1, probability 0, space 0, times 0
[ 1607.663981] CPU: 0 UID: 0 PID: 12112 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1607.664012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1607.664025] Call Trace:
[ 1607.664034]  <TASK>
[ 1607.664044]  dump_stack_lvl+0xfa/0x120
[ 1607.664088]  should_fail_ex+0x4d7/0x5e0
[ 1607.664140]  should_failslab+0xc2/0x120
[ 1607.664170]  kmem_cache_alloc_node_noprof+0x71/0x3e0
[ 1607.664210]  ? __alloc_skb+0x2ab/0x370
[ 1607.664234]  ? kasan_save_track+0x14/0x30
[ 1607.664261]  ? genl_start+0x1e8/0x960
[ 1607.664300]  __alloc_skb+0x2ab/0x370
[ 1607.664328]  ? __pfx___alloc_skb+0x10/0x10
[ 1607.664348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.664378]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1607.664438]  netlink_dump+0x194/0x1200
[ 1607.664471]  ? mark_held_locks+0x49/0x80
[ 1607.664509]  ? __pfx_netlink_dump+0x10/0x10
[ 1607.664529]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1607.664574]  ? __create_object+0x59/0x80
[ 1607.664643]  ? __asan_memset+0x24/0x50
[ 1607.664669]  ? genl_start+0x66e/0x960
[ 1607.664716]  __netlink_dump_start+0x6c5/0x980
[ 1607.664760]  genl_family_rcv_msg_dumpit+0x1b6/0x2b0
[ 1607.664798]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 1607.664855]  ? __pfx_genl_get_cmd+0x10/0x10
[ 1607.664885]  ? __pfx_genl_start+0x10/0x10
[ 1607.664909]  ? __pfx_genl_dumpit+0x10/0x10
[ 1607.664933]  ? __pfx_genl_done+0x10/0x10
[ 1607.664972]  ? __radix_tree_lookup+0x1f7/0x290
[ 1607.665030]  genl_rcv_msg+0x447/0x7e0
[ 1607.665075]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1607.665111]  ? __pfx_nl80211_dump_station+0x10/0x10
[ 1607.665187]  netlink_rcv_skb+0x147/0x430
[ 1607.665217]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1607.665261]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1607.665333]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1607.665355]  ? selinux_netlink_send+0x507/0x880
[ 1607.665377]  ? is_vmalloc_addr+0x86/0xa0
[ 1607.665426]  genl_rcv+0x28/0x40
[ 1607.665452]  netlink_unicast+0x5a7/0x870
[ 1607.665497]  ? __pfx_netlink_unicast+0x10/0x10
[ 1607.665566]  netlink_sendmsg+0x8ac/0xd80
[ 1607.665613]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1607.665682]  ____sys_sendmsg+0xa67/0xc20
[ 1607.665721]  ? copy_msghdr_from_user+0xfb/0x150
[ 1607.665749]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1607.665833]  ___sys_sendmsg+0x10f/0x1b0
[ 1607.665866]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1607.665891]  ? perf_trace_lock+0xb5/0x5d0
[ 1607.665934]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1607.665958]  ? proc_fail_nth_write+0x97/0x220
[ 1607.665996]  ? lock_acquire+0x15e/0x2f0
[ 1607.666021]  ? __fget_files+0x34/0x3b0
[ 1607.666058]  ? find_held_lock+0x2b/0x80
[ 1607.666092]  ? __fget_files+0x203/0x3b0
[ 1607.666129]  ? lock_release+0xc8/0x290
[ 1607.666171]  ? __fget_files+0x20d/0x3b0
[ 1607.666240]  __sys_sendmsg+0x150/0x200
[ 1607.666268]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1607.666327]  ? __pfx_ksys_write+0x10/0x10
[ 1607.666382]  do_syscall_64+0xbf/0x360
[ 1607.666425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1607.666447] RIP: 0033:0x7fd6de217b19
[ 1607.666466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1607.666486] RSP: 002b:00007fd6db78d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1607.666508] RAX: ffffffffffffffda RBX: 00007fd6de32af60 RCX: 00007fd6de217b19
[ 1607.666522] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 1607.666536] RBP: 00007fd6db78d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1607.666549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1607.666561] R13: 00007ffd8c938b0f R14: 00007fd6db78d300 R15: 0000000000022000
[ 1607.666628]  </TASK>
12:41:50 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x2, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 6)

12:41:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 1)

12:41:50 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3003, 0x3, &(0x7f0000563000/0x3000)=nil)

12:41:50 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xb790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:50 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x100, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000081)
shmat(0x0, &(0x7f000073e000/0x3000)=nil, 0x2000)
mremap(&(0x7f0000ad7000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000563000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x9, 0x8, 0x0)

12:41:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000008000e"], 0x1c}}, 0x0)

12:41:50 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10)

12:41:50 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x56000, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1618.250384] FAULT_INJECTION: forcing a failure.
[ 1618.250384] name failslab, interval 1, probability 0, space 0, times 0
[ 1618.251308] CPU: 0 UID: 0 PID: 12134 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1618.251325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1618.251332] Call Trace:
[ 1618.251338]  <TASK>
[ 1618.251343]  dump_stack_lvl+0xfa/0x120
[ 1618.251374]  should_fail_ex+0x4d7/0x5e0
[ 1618.251404]  should_failslab+0xc2/0x120
[ 1618.251421]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1618.251438]  ? task_active_pid_ns+0xa9/0xd0
[ 1618.251460]  ? check_sysctl_memfd_noexec+0x165/0x320
[ 1618.251483]  ? alloc_name+0x41/0x110
[ 1618.251498]  ? __pfx_check_sysctl_memfd_noexec+0x10/0x10
[ 1618.251524]  alloc_name+0x41/0x110
[ 1618.251543]  __x64_sys_memfd_create+0x130/0x280
[ 1618.251565]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 1618.251589]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1618.251611]  do_syscall_64+0xbf/0x360
[ 1618.251635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1618.251649] RIP: 0033:0x7f48be4fcb19
[ 1618.251659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1618.251670] RSP: 002b:00007f48bba71f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1618.251682] RAX: ffffffffffffffda RBX: 00000000200023c0 RCX: 00007f48be4fcb19
[ 1618.251690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f48be5560fb
[ 1618.251697] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1618.251704] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1618.251712] R13: 0000000000000000 R14: 00000000007dfffe R15: 0000000000000000
[ 1618.251748]  </TASK>
[ 1618.253529] FAULT_INJECTION: forcing a failure.
[ 1618.253529] name failslab, interval 1, probability 0, space 0, times 0
[ 1618.274088] CPU: 1 UID: 0 PID: 12133 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1618.274120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1618.274134] Call Trace:
[ 1618.274143]  <TASK>
[ 1618.274153]  dump_stack_lvl+0xfa/0x120
[ 1618.274194]  should_fail_ex+0x4d7/0x5e0
[ 1618.274235]  ? security_file_alloc+0x35/0x130
[ 1618.274266]  should_failslab+0xc2/0x120
[ 1618.274292]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1618.274328]  ? __create_object+0x59/0x80
[ 1618.274366]  security_file_alloc+0x35/0x130
[ 1618.274397]  init_file+0x95/0x4c0
[ 1618.274427]  alloc_empty_file+0x76/0x1e0
[ 1618.274458]  path_openat+0xe0/0x2880
[ 1618.274483]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1618.274521]  ? __pfx_path_openat+0x10/0x10
[ 1618.274542]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1618.274580]  do_filp_open+0x1e8/0x450
[ 1618.274601]  ? __pfx_do_filp_open+0x10/0x10
[ 1618.274637]  ? find_held_lock+0x2b/0x80
[ 1618.274669]  ? alloc_fd+0x2c1/0x560
[ 1618.274701]  ? lock_release+0xc8/0x290
[ 1618.274731]  ? _raw_spin_unlock+0x1e/0x40
[ 1618.274758]  ? alloc_fd+0x2c1/0x560
[ 1618.274803]  do_sys_openat2+0x104/0x1b0
[ 1618.274831]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1618.274871]  ? __fget_files+0x20d/0x3b0
[ 1618.274915]  __x64_sys_openat+0x142/0x200
[ 1618.274944]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1618.274972]  ? ksys_write+0x1a3/0x240
[ 1618.274999]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1618.275028]  do_syscall_64+0xbf/0x360
[ 1618.275065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1618.275089] RIP: 0033:0x7f2a74959b19
[ 1618.275106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1618.275127] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1618.275149] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1618.275164] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1618.275178] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1618.275191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1618.275204] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1618.275240]  </TASK>
12:41:50 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x7, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:41:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000900000008000e"], 0x1c}}, 0x0)

12:41:50 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000764000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x80, 0x80, 0x0)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/73)
shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/232)

12:42:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000a00000008000e"], 0x1c}}, 0x0)

12:42:00 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x8, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:00 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x7fffdfa9c000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 2)

12:42:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11)

12:42:00 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xc790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 7)

12:42:00 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil)
r0 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f00006da000/0x1000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/42)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 8)

12:42:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12)

12:42:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 3)

12:42:00 executing program 4:
r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000a90000/0x3000)=nil)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000a92000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/230, 0xe6}, &(0x7f0000001140)=0x40)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1628.896520] FAULT_INJECTION: forcing a failure.
[ 1628.896520] name failslab, interval 1, probability 0, space 0, times 0
[ 1628.897621] CPU: 0 UID: 0 PID: 12173 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1628.897638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1628.897646] Call Trace:
[ 1628.897651]  <TASK>
[ 1628.897656]  dump_stack_lvl+0xfa/0x120
[ 1628.897683]  should_fail_ex+0x4d7/0x5e0
[ 1628.897712]  should_failslab+0xc2/0x120
[ 1628.897727]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1628.897744]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1628.897761]  ? __pfx___mutex_lock+0x10/0x10
[ 1628.897783]  ? rfkill_fop_open+0x56/0x700
[ 1628.897801]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1628.897823]  rfkill_fop_open+0x56/0x700
[ 1628.897842]  ? find_held_lock+0x2b/0x80
[ 1628.897867]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1628.897889]  misc_open+0x31e/0x420
[ 1628.897907]  ? __pfx_misc_open+0x10/0x10
[ 1628.897920]  chrdev_open+0x234/0x690
[ 1628.897937]  ? __pfx_chrdev_open+0x10/0x10
[ 1628.897951]  ? lock_release+0xc8/0x290
[ 1628.897979]  do_dentry_open+0x71c/0x1420
[ 1628.897996]  ? __pfx_chrdev_open+0x10/0x10
[ 1628.898021]  vfs_open+0x82/0x3f0
[ 1628.898036]  ? may_open+0x1f3/0x420
[ 1628.898060]  path_openat+0x1c3f/0x2880
[ 1628.898095]  ? __pfx_path_openat+0x10/0x10
[ 1628.898106]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1628.898141]  do_filp_open+0x1e8/0x450
[ 1628.898154]  ? __pfx_do_filp_open+0x10/0x10
[ 1628.898187]  ? find_held_lock+0x2b/0x80
[ 1628.898206]  ? alloc_fd+0x2c1/0x560
[ 1628.898226]  ? lock_release+0xc8/0x290
[ 1628.898250]  ? alloc_fd+0x2c1/0x560
[ 1628.898287]  do_sys_openat2+0x104/0x1b0
[ 1628.898304]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1628.898327]  ? __fget_files+0x20d/0x3b0
[ 1628.898359]  __x64_sys_openat+0x142/0x200
[ 1628.898377]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1628.898392]  ? ksys_write+0x1a3/0x240
[ 1628.898414]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1628.898437]  do_syscall_64+0xbf/0x360
[ 1628.898461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1628.898474] RIP: 0033:0x7f2a74959b19
[ 1628.898485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1628.898496] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1628.898509] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1628.898517] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1628.898525] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1628.898532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1628.898539] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1628.898574]  </TASK>
12:42:01 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000b00000008000e"], 0x1c}}, 0x0)

12:42:01 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xd790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:01 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13)

12:42:01 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x9, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1629.009498] FAULT_INJECTION: forcing a failure.
[ 1629.009498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1629.011295] CPU: 1 UID: 0 PID: 12180 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1629.011325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1629.011338] Call Trace:
[ 1629.011346]  <TASK>
[ 1629.011355]  dump_stack_lvl+0xfa/0x120
[ 1629.011395]  should_fail_ex+0x4d7/0x5e0
[ 1629.011436]  strncpy_from_user+0x3b/0x2f0
[ 1629.011471]  alloc_name+0x78/0x110
[ 1629.011504]  __x64_sys_memfd_create+0x130/0x280
[ 1629.011539]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 1629.011575]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1629.011606]  do_syscall_64+0xbf/0x360
[ 1629.011642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1629.011665] RIP: 0033:0x7f48be4fcb19
[ 1629.011682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1629.011702] RSP: 002b:00007f48bba71f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1629.011724] RAX: ffffffffffffffda RBX: 00000000200023c0 RCX: 00007f48be4fcb19
[ 1629.011739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f48be5560fb
[ 1629.011752] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1629.011766] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1629.011779] R13: 0000000000000000 R14: 00000000007dfffe R15: 0000000000000000
[ 1629.011814]  </TASK>
[ 1629.061838] FAULT_INJECTION: forcing a failure.
[ 1629.061838] name failslab, interval 1, probability 0, space 0, times 0
[ 1629.062803] CPU: 0 UID: 0 PID: 12186 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1629.062819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1629.062827] Call Trace:
[ 1629.062833]  <TASK>
[ 1629.062839]  dump_stack_lvl+0xfa/0x120
[ 1629.062871]  should_fail_ex+0x4d7/0x5e0
[ 1629.062900]  should_failslab+0xc2/0x120
[ 1629.062918]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1629.062939]  ? kasan_save_stack+0x34/0x50
[ 1629.062952]  ? kasan_save_stack+0x24/0x50
[ 1629.062965]  ? nl80211_prepare_wdev_dump+0x403/0x760
[ 1629.062978]  ? __kasan_kmalloc+0x7f/0x90
[ 1629.062991]  ? kmalloc_reserve+0xed/0x2b0
[ 1629.063016]  nl80211_prepare_wdev_dump+0x403/0x760
[ 1629.063032]  ? ____sys_sendmsg+0xa67/0xc20
[ 1629.063048]  ? ___sys_sendmsg+0x10f/0x1b0
[ 1629.063068]  nl80211_dump_station+0xdb/0x940
[ 1629.063088]  ? perf_trace_lock+0xb5/0x5d0
[ 1629.063114]  ? __pfx_nl80211_dump_station+0x10/0x10
[ 1629.063140]  ? do_raw_spin_lock+0x123/0x260
[ 1629.063171]  ? mark_held_locks+0x49/0x80
[ 1629.063201]  ? kasan_save_track+0x14/0x30
[ 1629.063215]  ? __kasan_kmalloc+0x7f/0x90
[ 1629.063231]  ? trace_kmalloc+0x1f/0xb0
[ 1629.063244]  ? __kmalloc_node_track_caller_noprof+0x20b/0x490
[ 1629.063265]  ? __create_object+0x59/0x80
[ 1629.063284]  ? __alloc_skb+0x161/0x370
[ 1629.063298]  ? trace_kmem_cache_alloc+0x1f/0xb0
[ 1629.063317]  ? __asan_memset+0x24/0x50
[ 1629.063331]  ? __build_skb_around+0x27f/0x3b0
[ 1629.063355]  ? __alloc_skb+0x1f9/0x370
[ 1629.063369]  ? __pfx___alloc_skb+0x10/0x10
[ 1629.063380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1629.063397]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1629.063420]  genl_dumpit+0x125/0x220
[ 1629.063442]  netlink_dump+0x51a/0x1200
[ 1629.063460]  ? mark_held_locks+0x49/0x80
[ 1629.063480]  ? __pfx_netlink_dump+0x10/0x10
[ 1629.063491]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1629.063509]  ? __create_object+0x59/0x80
[ 1629.063545]  ? __asan_memset+0x24/0x50
[ 1629.063560]  ? genl_start+0x66e/0x960
[ 1629.063584]  __netlink_dump_start+0x6c5/0x980
[ 1629.063609]  genl_family_rcv_msg_dumpit+0x1b6/0x2b0
[ 1629.063629]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 1629.063661]  ? __pfx_genl_get_cmd+0x10/0x10
[ 1629.063673]  ? __pfx_genl_start+0x10/0x10
[ 1629.063686]  ? __pfx_genl_dumpit+0x10/0x10
[ 1629.063699]  ? __pfx_genl_done+0x10/0x10
[ 1629.063720]  ? __radix_tree_lookup+0x1f7/0x290
[ 1629.063755]  genl_rcv_msg+0x447/0x7e0
[ 1629.063780]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1629.063799]  ? __pfx_nl80211_dump_station+0x10/0x10
[ 1629.063840]  netlink_rcv_skb+0x147/0x430
[ 1629.063856]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1629.063877]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1629.063916]  ? netlink_deliver_tap+0x1ae/0xce0
[ 1629.063928]  ? selinux_netlink_send+0x507/0x880
[ 1629.063941]  ? is_vmalloc_addr+0x86/0xa0
[ 1629.063968]  genl_rcv+0x28/0x40
[ 1629.063983]  netlink_unicast+0x5a7/0x870
[ 1629.064007]  ? __pfx_netlink_unicast+0x10/0x10
[ 1629.064044]  netlink_sendmsg+0x8ac/0xd80
[ 1629.064070]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1629.064108]  ____sys_sendmsg+0xa67/0xc20
[ 1629.064128]  ? copy_msghdr_from_user+0xfb/0x150
[ 1629.064143]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1629.064189]  ___sys_sendmsg+0x10f/0x1b0
[ 1629.064206]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1629.064219]  ? perf_trace_lock+0xb5/0x5d0
[ 1629.064242]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1629.064254]  ? proc_fail_nth_write+0x97/0x220
[ 1629.064276]  ? lock_acquire+0x15e/0x2f0
[ 1629.064289]  ? __fget_files+0x34/0x3b0
[ 1629.064310]  ? find_held_lock+0x2b/0x80
[ 1629.064328]  ? __fget_files+0x203/0x3b0
[ 1629.064347]  ? lock_release+0xc8/0x290
[ 1629.064370]  ? __fget_files+0x20d/0x3b0
[ 1629.064408]  __sys_sendmsg+0x150/0x200
[ 1629.064423]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1629.064455]  ? __pfx_ksys_write+0x10/0x10
[ 1629.064486]  do_syscall_64+0xbf/0x360
[ 1629.064510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1629.064522] RIP: 0033:0x7fd6de217b19
[ 1629.064533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1629.064544] RSP: 002b:00007fd6db78d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1629.064556] RAX: ffffffffffffffda RBX: 00007fd6de32af60 RCX: 00007fd6de217b19
[ 1629.064564] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 1629.064571] RBP: 00007fd6db78d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1629.064578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1629.064585] R13: 00007ffd8c938b0f R14: 00007fd6db78d300 R15: 0000000000022000
[ 1629.064621]  </TASK>
12:42:10 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000563000/0x3000)=nil)

12:42:10 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xa, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:10 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 14)

12:42:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xe790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:10 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 9)

12:42:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000c00000008000e"], 0x1c}}, 0x0)

12:42:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 4)

12:42:10 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0xb, &(0x7f0000563000/0x3000)=nil)

12:42:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xf790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1638.031042] FAULT_INJECTION: forcing a failure.
[ 1638.031042] name failslab, interval 1, probability 0, space 0, times 0
[ 1638.032014] CPU: 0 UID: 0 PID: 12209 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1638.032030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1638.032038] Call Trace:
[ 1638.032043]  <TASK>
[ 1638.032048]  dump_stack_lvl+0xfa/0x120
[ 1638.032076]  should_fail_ex+0x4d7/0x5e0
[ 1638.032105]  should_failslab+0xc2/0x120
[ 1638.032122]  kmem_cache_alloc_lru_noprof+0x73/0x3c0
[ 1638.032146]  ? shmem_alloc_inode+0x27/0x50
[ 1638.032162]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1638.032185]  shmem_alloc_inode+0x27/0x50
[ 1638.032199]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1638.032213]  alloc_inode+0x67/0x250
[ 1638.032232]  new_inode+0x1e/0x160
[ 1638.032252]  __shmem_get_inode+0x17c/0xe80
[ 1638.032283]  __shmem_file_setup+0x107/0x370
[ 1638.032309]  alloc_file+0x11c/0x500
[ 1638.032331]  __x64_sys_memfd_create+0x193/0x280
[ 1638.032352]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 1638.032376]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1638.032399]  do_syscall_64+0xbf/0x360
[ 1638.032423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1638.032436] RIP: 0033:0x7f48be4fcb19
[ 1638.032446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1638.032458] RSP: 002b:00007f48bba71f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1638.032470] RAX: ffffffffffffffda RBX: 00000000200023c0 RCX: 00007f48be4fcb19
[ 1638.032478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f48be5560fb
[ 1638.032485] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1638.032492] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1638.032499] R13: 0000000000000000 R14: 00000000007dfffe R15: 0000000000000000
[ 1638.032534]  </TASK>
12:42:10 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xb, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:10 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000f21000/0x2000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/148)

12:42:10 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0) (fail_nth: 15)

12:42:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000e00000008000e"], 0x1c}}, 0x0)

12:42:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:10 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 10)

12:42:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 5)

12:42:10 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x10, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:10 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000bff000/0x4000)=nil)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000)
mremap(&(0x7f0000c6e000/0x2000)=nil, 0x2000, 0x1000, 0xf, &(0x7f00009b7000/0x1000)=nil)
mbind(&(0x7f0000f92000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x828, 0x4, 0x2)

[ 1638.239083] FAULT_INJECTION: forcing a failure.
[ 1638.239083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1638.240042] CPU: 0 UID: 0 PID: 12226 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1638.240058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1638.240065] Call Trace:
[ 1638.240070]  <TASK>
[ 1638.240076]  dump_stack_lvl+0xfa/0x120
[ 1638.240103]  should_fail_ex+0x4d7/0x5e0
[ 1638.240136]  _copy_to_user+0x32/0xd0
[ 1638.240156]  simple_read_from_buffer+0xe0/0x180
[ 1638.240182]  proc_fail_nth_read+0x18a/0x240
[ 1638.240201]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1638.240218]  ? security_file_permission+0x22/0x90
[ 1638.240240]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1638.240256]  vfs_read+0x1eb/0xbe0
[ 1638.240280]  ? __pfx_vfs_read+0x10/0x10
[ 1638.240296]  ? lock_release+0xc8/0x290
[ 1638.240321]  ? __fget_files+0x20d/0x3b0
[ 1638.240360]  ksys_read+0x121/0x240
[ 1638.240372]  ? __pfx_ksys_read+0x10/0x10
[ 1638.240402]  do_syscall_64+0xbf/0x360
[ 1638.240425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1638.240439] RIP: 0033:0x7fd6de1ca69c
[ 1638.240449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1638.240461] RSP: 002b:00007fd6db78d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1638.240473] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007fd6de1ca69c
[ 1638.240481] RDX: 000000000000000f RSI: 00007fd6db78d1e0 RDI: 0000000000000005
[ 1638.240488] RBP: 00007fd6db78d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1638.240495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1638.240501] R13: 00007ffd8c938b0f R14: 00007fd6db78d300 R15: 0000000000022000
[ 1638.240537]  </TASK>
[ 1638.301664] FAULT_INJECTION: forcing a failure.
[ 1638.301664] name failslab, interval 1, probability 0, space 0, times 0
[ 1638.303682] CPU: 1 UID: 0 PID: 12236 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1638.303714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1638.303728] Call Trace:
[ 1638.303737]  <TASK>
[ 1638.303746]  dump_stack_lvl+0xfa/0x120
[ 1638.303790]  should_fail_ex+0x4d7/0x5e0
[ 1638.303835]  should_failslab+0xc2/0x120
[ 1638.303863]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1638.303911]  ? lockdep_init_map_type+0x4b/0x240
[ 1638.303941]  ? rfkill_fop_open+0x1ad/0x700
[ 1638.303981]  rfkill_fop_open+0x1ad/0x700
[ 1638.304019]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1638.304056]  misc_open+0x31e/0x420
[ 1638.304084]  ? __pfx_misc_open+0x10/0x10
[ 1638.304107]  chrdev_open+0x234/0x690
[ 1638.304136]  ? __pfx_chrdev_open+0x10/0x10
[ 1638.304162]  ? lock_release+0xc8/0x290
[ 1638.304199]  do_dentry_open+0x71c/0x1420
[ 1638.304227]  ? __pfx_chrdev_open+0x10/0x10
[ 1638.304262]  vfs_open+0x82/0x3f0
[ 1638.304290]  ? may_open+0x1f3/0x420
[ 1638.304327]  path_openat+0x1c3f/0x2880
[ 1638.304369]  ? __pfx_path_openat+0x10/0x10
[ 1638.304392]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1638.304433]  do_filp_open+0x1e8/0x450
[ 1638.304456]  ? __pfx_do_filp_open+0x10/0x10
[ 1638.304496]  ? find_held_lock+0x2b/0x80
[ 1638.304531]  ? alloc_fd+0x2c1/0x560
[ 1638.304566]  ? lock_release+0xc8/0x290
[ 1638.304600]  ? alloc_fd+0x2c1/0x560
[ 1638.304650]  do_sys_openat2+0x104/0x1b0
[ 1638.304680]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1638.304716]  ? __fget_files+0x20d/0x3b0
[ 1638.304763]  __x64_sys_openat+0x142/0x200
[ 1638.304795]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1638.304824]  ? ksys_write+0x1a3/0x240
[ 1638.304855]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1638.304887]  do_syscall_64+0xbf/0x360
[ 1638.304926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1638.304951] RIP: 0033:0x7f2a74959b19
[ 1638.304969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1638.304991] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1638.305025] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1638.305041] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1638.305056] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1638.305070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1638.305084] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1638.305124]  </TASK>
12:42:19 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 11)

12:42:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000f00000008000e"], 0x1c}}, 0x0)

12:42:19 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:42:19 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x10790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:19 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x700, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:19 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 6)

12:42:19 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f000081b000/0x3000)=nil, 0x3000, 0x200000b, r0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
pkey_alloc(0x0, 0x1)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:19 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f000093e000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x802, 0x0, 0x6)

12:42:19 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x900, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001000000008000e"], 0x1c}}, 0x0)

[ 1647.589809] FAULT_INJECTION: forcing a failure.
[ 1647.589809] name failslab, interval 1, probability 0, space 0, times 0
[ 1647.591578] CPU: 1 UID: 0 PID: 12262 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1647.591609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1647.591622] Call Trace:
[ 1647.591630]  <TASK>
[ 1647.591638]  dump_stack_lvl+0xfa/0x120
[ 1647.591680]  should_fail_ex+0x4d7/0x5e0
[ 1647.591720]  ? security_inode_alloc+0x3e/0x130
[ 1647.591747]  should_failslab+0xc2/0x120
[ 1647.591773]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1647.591810]  ? lockdep_init_map_type+0x4b/0x240
[ 1647.591844]  security_inode_alloc+0x3e/0x130
[ 1647.591881]  inode_init_always_gfp+0xc94/0xff0
[ 1647.591910]  alloc_inode+0x8d/0x250
[ 1647.591939]  new_inode+0x1e/0x160
[ 1647.591969]  __shmem_get_inode+0x17c/0xe80
[ 1647.592010]  __shmem_file_setup+0x107/0x370
[ 1647.592047]  alloc_file+0x11c/0x500
[ 1647.592082]  __x64_sys_memfd_create+0x193/0x280
[ 1647.592119]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 1647.592158]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1647.592187]  do_syscall_64+0xbf/0x360
[ 1647.592224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1647.592248] RIP: 0033:0x7f48be4fcb19
[ 1647.592265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1647.592286] RSP: 002b:00007f48bba71f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1647.592308] RAX: ffffffffffffffda RBX: 00000000200023c0 RCX: 00007f48be4fcb19
[ 1647.592322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f48be5560fb
[ 1647.592336] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1647.592350] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1647.592364] R13: 0000000000000000 R14: 00000000007dfffe R15: 0000000000000000
[ 1647.592400]  </TASK>
12:42:19 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000563000/0x3000)=nil)

12:42:19 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x11790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:30 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xa00, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300020000000000001100000008000e"], 0x1c}}, 0x0)

12:42:30 executing program 3:
syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x12790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 12)

12:42:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 7)

12:42:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:42:30 executing program 4:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1658.455737] FAULT_INJECTION: forcing a failure.
[ 1658.455737] name failslab, interval 1, probability 0, space 0, times 0
[ 1658.457740] CPU: 1 UID: 0 PID: 12285 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1658.457772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1658.457786] Call Trace:
[ 1658.457794]  <TASK>
[ 1658.457803]  dump_stack_lvl+0xfa/0x120
[ 1658.457846]  should_fail_ex+0x4d7/0x5e0
[ 1658.457897]  should_failslab+0xc2/0x120
[ 1658.457925]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1658.457961]  ? mark_held_locks+0x49/0x80
[ 1658.457987]  ? rfkill_fop_open+0x1ad/0x700
[ 1658.458026]  rfkill_fop_open+0x1ad/0x700
[ 1658.458064]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1658.458101]  misc_open+0x31e/0x420
[ 1658.458129]  ? __pfx_misc_open+0x10/0x10
[ 1658.458153]  chrdev_open+0x234/0x690
[ 1658.458181]  ? __pfx_chrdev_open+0x10/0x10
[ 1658.458206]  ? lock_release+0xc8/0x290
[ 1658.458243]  do_dentry_open+0x71c/0x1420
[ 1658.458270]  ? __pfx_chrdev_open+0x10/0x10
[ 1658.458305]  vfs_open+0x82/0x3f0
[ 1658.458333]  ? may_open+0x1f3/0x420
[ 1658.458370]  path_openat+0x1c3f/0x2880
[ 1658.458411]  ? __pfx_path_openat+0x10/0x10
[ 1658.458434]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1658.458475]  do_filp_open+0x1e8/0x450
[ 1658.458498]  ? __pfx_do_filp_open+0x10/0x10
[ 1658.458538]  ? find_held_lock+0x2b/0x80
[ 1658.458571]  ? alloc_fd+0x2c1/0x560
[ 1658.458606]  ? lock_release+0xc8/0x290
[ 1658.458640]  ? alloc_fd+0x2c1/0x560
[ 1658.458690]  do_sys_openat2+0x104/0x1b0
[ 1658.458720]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1658.458756]  ? __fget_files+0x20d/0x3b0
[ 1658.458804]  __x64_sys_openat+0x142/0x200
[ 1658.458836]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1658.458866]  ? ksys_write+0x1a3/0x240
[ 1658.458897]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1658.458929]  do_syscall_64+0xbf/0x360
[ 1658.458969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1658.458993] RIP: 0033:0x7f2a74959b19
[ 1658.459011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1658.459034] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1658.459057] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1658.459073] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1658.459088] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1658.459102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1658.459116] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1658.459156]  </TASK>
12:42:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 8)

12:42:30 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x311000, 0x0)
syncfs(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x55f7e6db05a30253, 0xffffffffffffffff, 0xeb4a6000)

12:42:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x13790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:42:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300040000000000001100000008000e"], 0x1c}}, 0x0)

12:42:30 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)={0x133c, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x1240, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "565d605993a49a02326980cfe29e5ed7202083cfe2486663e01212f9b24635b0d78e55eac37fc43def741a6043deae9cead7d71bce147bbae407b61aeef3ed8aa40f202b0bb21c1a97ffa314ae4937ac7109756094758a5dd322a82b242af2224e00ee6c943d02437819558274bdac3353c9b840df17caa1564eaa15f585f82635cba80898231718fef6f28f159710a95a187c507a58bbefadae3b0f36ae9e7115a9a25874e2b6767a5d4a885a531b4c0413625d7210459830055ff511b879d368f43bdd92c21cf546c0077f181c90feaa62d5c2a0b711d0d7100e995f8ff741c04fb7f4c6b858ea0a999d5f86ba2ab90bc997971dfd5fdddb85e0f862cab904f11ef4c964c807667dda4b21aee9fce48f5c52d87c9f11bed7d5058da1dccf08cbb4e5ec1144d4036bdb98773a13bee01d363f2e5e79149af2384f7e47687b98297995856bb75a87db388d7eb31df531443ca593d8957a65ea1a8406978dea65ba62647a24a7fd20feb9a9efd955199111fa3b80c959e985ad71bb55a8133b213e771e57cb825344ca4dcb669737b0b900a9eefd7b5049abc56db1ea296ed1f4c4eba8df26278199d8e0d7f7ba2f4761612cd55d95ffead728baa1723e9914f1b3e214d5014d586f63be3fb10ce3e859852296fe591e68e03bc14da4397fc4adf8a78499bb2fef8f2e6cb636a0ff5f318c4d5342fd63829531b8f3aeb2aa3122ba0a7eba65f6b3e0b2e2c37c7d8b9d5e94bbae46007a5b1b1dd4f3318d9098e2a88e689bc4d55f923f0a759422cabb1a9ace912d247dac6b086d8d4591d9f84f496e607835524c2bca9fe33a1e4216ad6b238162981824283710fa721baf0b4b8ea59539377297acce6bea66a4f5640b863e3147c38b0bdd3310b35c360e06f02067e5ffff8e97d8fac7d1ff3357af26f91593ed6c473d384b8068ba5984c154c920d4faaf976be0aa68825f33601a42fd3a4b3c54b08454bc810bfc21ac5295615098699a974362f07e3c1530eacc68bb6c23f4edccefafbe0ed33537040a1e252d2b2e21703666d72d50623b49291ec674f8fef2771e9c3d697cece43f7175db2ea5c725b3dafcf37b414e01cdf636361c68f0caab8ee3e612d8d534f65e0653cf9941091c70a2dc25530b4e1e8f43447d510952d6a637a24da3d524190b7b6a52c357e67d68b705a5cd13ffbc920318e1067e75952f27b0aa984604d84707cb60ede62ba07fa2028232a95b18949ba7e07e11d848316e82d4f88b4273fd30bf6b2a438b978e76b9cb88ed6ff5ef24275f9543781429891049461867aff0d99f8e9bfea4c6ce1871d9ff1bd84fb606916eb4ac8f2afc56fb2f6e19ed1ec6d4a462b470e452d1820e6671e5523b3e63909dd162c2831cf0d3acd3e5286b0c0be0d9c3ee764111bafd8a746a6de7be0ac7142ba67f6a1bfcd4881779d10d3ded096e531e257411f77d1561361b2ba0d3a1b08c3ac7108a03b794ed7fe716beaa194af26a3e231af1a225c4e4b81d50e328eacdf25f71fdab6329ca8c8b12cc87ebc8170c384265d5a4588343d4834b97c8bd95c0bb6812996ff95480be31df4c0e979b6b742875e20a732615d2a236dbc37aa6ed6087bc9c76f6b4c039f4fa3c2a107c42e737da7078f8681a56fd8e98ff51994fc1380397e446111ac66744389288d7ca96c43ff328f483655b7e5c5cfc20f13416c9ef06296b4b1acbe49a45ab26a7eb1f26d7cbc1e695130f52294d13d6aa77fbf0300493c1c2a7f3582b5eca769cd1f05a5c16b8a5ab073cd891062173c63036b47a5c3b6544ceef2f3c872b9c0eda3eeb4bc66456e74bdaeb4f3b2754aaa8cfa9c9cd79891183e36dc10124391926d10b727b81f3a91d6ab47e79163c3ee0362ed2d900755bfbe9c23b76115318ef6296d8d4d8b48c05d6b43092fbe3c6098457dea23e2045688346f926c66d85bb7496650515b047564db567156976886616020c5bf4e2485b0c30a889aa5cbcb00ad12998c2ca0103dec9373eb97b19ce198e6f7dbd1ccd8c346279f8ebc2a97fcc29ef093cb25a10d7596b5d1a98064d60c5ecef9ec13b873da28628bcea061dd5966bf2895b14a7325f7f42252a387f3450945a9fba72d8870d82e9b93d19350f8a67e9d01cae329de27c53bd5fb915e51ae36d60ffbe13b62db13095bd726af705cdeb363b811c1da536cdf5df489d053a4146f5d370d569a1c0f49edcc58ffaa12cd733ea6e63be22d0529ff59bdcaaeefb462755d8d28977c05e53da2bb52247e9cf6374dfc9e3a7cc038a3dfa98597e92ad5cf02d5d1314a13a004f02ec7e964f5cb7a057609323199ad652a84ccbff9a1c9902302e6c0c5f815f5ce0c78931f4ae81b8c701785c14d173784e1b22087c8dc28c578d16aa502207d18852107e6413d64160a2107ffa41b6818365e8dfc25e0291321842b6a579f4b5037a76d5a8f663c4d60d2a747d49a363d767a49133e1e83e1c4e9b2d9ca953a26c20b70ec10d5208d5c8d615a6813b528cda6e13214b30e137759ae11b0edb952a50d9250e0c62e36419911389ae5187f28934e60bf65782554c00b8eae2f49dca68c3dc06032c8be67f2793eed3cb4853c07f2aa5c099f69262bbea809bc83cc68c360605b4ebd35c15aa1a7de2d2190a62699ca42435a843cff81f2ff79f98173884a445f603443b08496250c98eabf8d2964763c8e5c9233bce55253ed3f0797a573d7a1c1043209be3ea8676be9e3c17f55b0af424ddb4b0c3b4d226258c67b1b1fbdd55414f922d41463d4c06ceda0caaef21a3341ba9e3e809a6c0af3b3cf7fb4de4d70f4ae780ceaacb0ff07d1c1a7c82319cd9ac20e23ed2fe28a65f13e238ce2af5acea41fa17d36c55256d7186af268c7e2a1f95092a4f0e9144e4d258045d1d5efe8af10ece053f36a6e1e28a16c615accd9d6ba2bc173c469858a4c71f9fd895526b2988ac80fb100c2d1dffb95836a6bd9f636e8da97da711e47e634ae61475dd48282f45383e3efa8251aca71a7365b3a9e613435b4b139f448401673687db5fb6c460742fed24d6e8361d73c6eb3bca731aa5a90a57eea5533bf273c21f97b3542ce25d9fa7c4336fcd23695384a271e915a912a449d950e9535e5fdf2b6e6903a6975890b75d631f25c02f43a839456faca542e3803e9b08ba59a2f94cd9438b7c3d0702a37c13588807f696697eda4079538d2e2b2b6bd144a54c7131b255a0ad983f52a472a0f47b36eab55bec82037757a568f57326adbf8204133a62c08ac1a6892490c513c749ba37c6bc1fef30a333c4747f34ecaa5c5860bebc7971a4ab96173a61dfa96fc049585281c1d36ebac4b6482a4eb2794ed40e7a6689ae92673984332bb8fa9dbfed766c32445614bdc210614619d424d22bd1b527d54918c37826cc099d9a91cdb8e8732dde5db502c5195f11e1c2a150fafa79c918c6b0f3413898de2237f914bb1d1883b88e45b6e8ccdd3a7000f9fc04296e076f76ceffbfc490861cf35b4bbcfa03046016add39fb7878857f57b57a965743aac7e8078f60892ac0fe993da50a006c232a267c74a922c40776d8cd2e04571b27ac1fbdc5c3e13a4e9c9a7e93a01576655900951714d1279c9ff07a52c31c70a9d3b1431b99ee3b4fb4201ba6a7126b66e7d696daaaf2fe540004fbf45081c9ecc6ad6b172de8f8370b108c5d9db915a96259187e9681563073fbd51f91782472dab1569d297229e4fbb23fffdfb9af990a8439c928992c56f9dcdf6c34a94ca31cf48228cc85097edfbb6afe9f1e761f573b4bb808f6312a2f63e58ec57c1087f4a863eae4614701d0fdfa00953301f87b7291f80ebb540ef07b65c5fa1328e6000b674fc200b1c35f352a5a31e9dd3bb195ce1421b10a32560775db3f382de6416db0d48cea5ac5f3f2c98ca6f51b0041f992621006080516325864d13bf9e7587cf4924ea3af174e73ab03b34c9142463d7a5ef0088edf5d31c0648192dc5cf5936a1a901056fdce824c8d570da014f0ce8ba739c1f215004fc5a5c63befffafaf9a674ad53abf9988957b6dc729b790de3293ea009bbef41f5ae114a0d44b036d22ac73c0d8703fcbaf33cae736fc931236d0f3a8d95c4fc7ba5041136fcb91b6ae925b61a57d837e7882e8a07b3b961727ce60148848397580f0fa7ae60d3991e4ad2bbf143bc12b687b13ed882dbee044bf4f6706222965db4ae84b9bace1a1f63a3b4176e3b8cc7a3d3cbd477e574be79855d6725f05ac57d775946731dd4ddd4070f25ad3db72e2f452621613c1a19a127a7df866e0190269244396976b513da5ebade82b84a77e0a46697782cbb3db8160225abf26de33ed9aa3c398af26296697f86a4e0501ed9014c1e8ddc7c2dd559308a5c655740ce2e4aab8680d084dfc205482f0be4df4dfb6326f0a261c14439a1eecb19866b6a9c278eec5d74e93f685245f284962a30af69b063d4ba884477d9b5d6860ba2e72503b910abde62dc0bf2ef89d8c6b6e5172ac8a47a22881599549b5a5828f72c904a28d31e9013e55a7685b8358b5d31eba0024485642007b3e71ef8827964af9f3386062ef057d7e31794bf1e46955ab0497d4a6311b6b1ed3679870b08828bee679605462e964b42d5f45420a709ae6e5ebb3be6d18f5e646a22c7a37c0f1b87062ea1abc358c8e73b17fd954da19979c364c121a0d494c614face8a6ea7d682d7f5f778e22f39d9211f5a9e4413875d777df753e6d3a4b27923ac0558add1cd832b82a4b78a75a4fedce99b91f00b3e7ffaafa519f6a6e022869a92306b2d61ba019c7772abe62f749362b25336a69e653bb24f3419d840f03f3ac5a19d734add2e80bd0a5c31467c4891bfabd47758ff04081d9498d6782b133f8ed4211349d629c39e74c9fdc2ed0095f3e27fad0803e6a1e101b95185643174f92b396f7cf8e5b27b588ee843c06f22f43d6da05e12a35037525d661171ad59bc99ec996ce6453765cdfbdc67078e52bef291b015f51b4f67b9ab7d4c8a5977ec78b719561dbf8ed4041c621956added95903c15a6089098fb00e4dbe579e3a93f202501e337d32db40047748dd83355a51127aa2574edb6c375cb59740460fb564c28be0a3ea9acc30bbdbb3d72761633387f3f8eee4679cbe59b21c84854bea2cb7834f78e97165b9f45560bea53ee50a100f94f8322d57b52ac2e8541f86d096911050da9ec5a4b1cb8358c794208be47a9ebf686b0bfdeae0b562d0d9aee9ff7a03c2038585d9a2735bdcc15a1f236d221c766fc6cc2460b8039fb0b81a1b5e4c1bd497ef4316ca4122a3cb56b60a245be9d82c5bb96d039c05c1f997f62e962592a317234e2f9a2e695900fb8520737e04c4358bbf5aeee395310362e67ab51f21fb3ec939df7a9e06f3d1428f0349aaa2ba586145f2f50cd04a374e30583d09a2f5e066b8fae787f2645317bc81294db2999c7ee14492f2f1aec1648e3edddd00e2385c940a02829f8b8b9567b7bf1331ea9cded06c5c8e2045d69ecadd734e0efa268f902af58640ed34811b998cc53147b4390a11394dba6a5b8d30ad8de193e689f0ab1087ef04e307afbdcae31eee87ced2f2ac78567dfd7b74997838b64722eaea0fc3885f85b43fba753fda0ab882bdb32b9ed049537e625ced4f8e9a84d7780c3e3ed046e87732136b6d5105eb81104a3f7830a28112e2061c57a897a5c707ad18c4c935e3820a8b56a1020e7d92a82040e2c871a7956c4089594187c8daeef8293323eca682329955c9f9632825e2e0aa3a99cb246a25453cba"}, @ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "dc9e80dd5091b95a436ec5"}, @ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "0a584d996411add4556ec3ba99dfd3e3af3f6f5af93c142381cf8ef2f5fe88c44eb580ce29e50381e06fd8694ea92ab2d589bea876f3b47824e135a96e83301f41394245988b6f150e9bdde464c4e6154b15b19597ed90e782bf0883ea35655ce26d3c86442a1765228d6ffe9171699e2268530a5525ddd8cd002cae36075287ce1c3a7b09398aa4a1f75d5a316c2e18e49225a91224a142f7609e2f7d0a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "fa49a6039101d247570d3212aa02a57e97b35cb874551b05d181182dfae355244d69f08b63f77c5efe38a1ba1d8aec278b573b4cb4b4161538bf1425f6747bbb6fefc1dc506115279153f75978df3b869f4928af88da93588180d8e7603939c1a6995f96cd48d47287ef249f2dd292d5a05e5b228ed8a0f18a31bf37683fedbb74a06c7407cb8a1192c2afef1da8e25a09e0c5240db52e842a8ad53c2a06c82ca698b047f13e5b4e7680e2a52aa73d065f57fb7c"}, @ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "46ca6f5f640cc812da92cf2435be599b6f42d6fbb18899e0f3f0bb4b1c0f26d5c6987c7c545c27b08b5424316728a40f6a773f51324c90049f544ecfd9f385b86db5b6ebe36d7637ec5483c61fede9249812826747c1b276bd407ccab81a6941f842d532612a32d76dd2f74e60d4888e3543cbca2ca9a2b0c6dddbf29200367644dff8edd0d49ebe6aa6b905b901964809539e2717fdce52f6dd33f8f8bbee9800101d42141e09a9d47e518ae811eb2aa119c929aae15713d9e9f00f"}]}, @ETHTOOL_A_LINKMODES_OURS={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "4485b1ad32ce8c8d9e8532ebc23a0892d2939739c2bb734782546190b845859d5f0216e75654c6546a1697ff9b6b"}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%){],\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x771018a3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '},+\'-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1fe0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}]}, 0x133c}}, 0x340048d0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000548000/0x3000)=nil, 0x6000)
mremap(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000d09000/0x1000)=nil)

[ 1658.706701] FAULT_INJECTION: forcing a failure.
[ 1658.706701] name failslab, interval 1, probability 0, space 0, times 0
[ 1658.708565] CPU: 1 UID: 0 PID: 12301 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1658.708597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1658.708611] Call Trace:
[ 1658.708618]  <TASK>
[ 1658.708627]  dump_stack_lvl+0xfa/0x120
[ 1658.708669]  should_fail_ex+0x4d7/0x5e0
[ 1658.708712]  should_failslab+0xc2/0x120
[ 1658.708740]  kmem_cache_alloc_lru_noprof+0x73/0x3c0
[ 1658.708776]  ? find_held_lock+0x2b/0x80
[ 1658.708812]  ? __d_alloc+0x31/0xa10
[ 1658.708839]  ? lockdep_init_map_type+0x4b/0x240
[ 1658.708878]  __d_alloc+0x31/0xa10
[ 1658.708901]  ? mpol_shared_policy_init+0x24f/0x390
[ 1658.708932]  d_alloc_pseudo+0x1d/0xc0
[ 1658.708963]  alloc_file_pseudo+0xbe/0x220
[ 1658.708997]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1658.709027]  ? __shmem_get_inode+0x682/0xe80
[ 1658.709070]  __shmem_file_setup+0x1a7/0x370
[ 1658.709109]  alloc_file+0x11c/0x500
[ 1658.709144]  __x64_sys_memfd_create+0x193/0x280
[ 1658.709181]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 1658.709221]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1658.709253]  do_syscall_64+0xbf/0x360
[ 1658.709292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1658.709316] RIP: 0033:0x7f48be4fcb19
[ 1658.709334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1658.709372] RSP: 002b:00007f48bba71f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1658.709395] RAX: ffffffffffffffda RBX: 00000000200023c0 RCX: 00007f48be4fcb19
[ 1658.709411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f48be5560fb
[ 1658.709426] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1658.709440] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1658.709454] R13: 0000000000000000 R14: 00000000007dfffe R15: 0000000000000000
[ 1658.709492]  </TASK>
12:42:30 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xb00, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 13)

12:42:30 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xf8, 0x1, 0x9, 0x2, 0x0, 0x3, 0xb0190, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x100000000}, 0x1000, 0x9, 0x609bcea2, 0x7, 0x9, 0x7f, 0x8, 0x0, 0x2, 0x0, 0x101}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000550000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xa5)
mbind(&(0x7f0000927000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000000c0)=0xfffffffffffffffb, 0x5, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)

12:42:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:42:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x14000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:41 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000c10000/0x3000)=nil)
shmctl$IPC_RMID(r0, 0x0)
r1 = shmget$private(0x0, 0x12000, 0x800, &(0x7f0000a5a000/0x12000)=nil)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/46)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
shmdt(0x0)
mremap(&(0x7f0000550000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000819000/0x3000)=nil)

12:42:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 9)

12:42:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 14)

12:42:41 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x14790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300080000000000001100000008000e"], 0x1c}}, 0x0)

12:42:41 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x1020, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:41 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 1669.158260] FAULT_INJECTION: forcing a failure.
[ 1669.158260] name failslab, interval 1, probability 0, space 0, times 0
[ 1669.160017] CPU: 0 UID: 0 PID: 12348 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1669.160047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1669.160060] Call Trace:
[ 1669.160069]  <TASK>
[ 1669.160079]  dump_stack_lvl+0xfa/0x120
[ 1669.160124]  should_fail_ex+0x4d7/0x5e0
[ 1669.160175]  should_failslab+0xc2/0x120
[ 1669.160205]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1669.160243]  ? mark_held_locks+0x49/0x80
[ 1669.160269]  ? rfkill_fop_open+0x1ad/0x700
[ 1669.160317]  rfkill_fop_open+0x1ad/0x700
[ 1669.160362]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1669.160403]  misc_open+0x31e/0x420
[ 1669.160435]  ? __pfx_misc_open+0x10/0x10
[ 1669.160459]  chrdev_open+0x234/0x690
[ 1669.160489]  ? __pfx_chrdev_open+0x10/0x10
[ 1669.160516]  ? lock_release+0xc8/0x290
[ 1669.160566]  do_dentry_open+0x71c/0x1420
[ 1669.160597]  ? __pfx_chrdev_open+0x10/0x10
[ 1669.160644]  vfs_open+0x82/0x3f0
[ 1669.160672]  ? may_open+0x1f3/0x420
[ 1669.160715]  path_openat+0x1c3f/0x2880
[ 1669.160779]  ? __pfx_path_openat+0x10/0x10
[ 1669.160798]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1669.160871]  do_filp_open+0x1e8/0x450
[ 1669.160896]  ? __pfx_do_filp_open+0x10/0x10
[ 1669.160957]  ? find_held_lock+0x2b/0x80
[ 1669.160991]  ? alloc_fd+0x2c1/0x560
[ 1669.161026]  ? lock_release+0xc8/0x290
[ 1669.161072]  ? alloc_fd+0x2c1/0x560
[ 1669.161140]  do_sys_openat2+0x104/0x1b0
[ 1669.161172]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1669.161213]  ? __fget_files+0x20d/0x3b0
[ 1669.161274]  __x64_sys_openat+0x142/0x200
[ 1669.161307]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1669.161335]  ? ksys_write+0x1a3/0x240
[ 1669.161376]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1669.161417]  do_syscall_64+0xbf/0x360
[ 1669.161459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1669.161483] RIP: 0033:0x7f2a74959b19
[ 1669.161501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1669.161521] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1669.161557] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1669.161572] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1669.161586] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1669.161599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1669.161611] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1669.161678]  </TASK>
12:42:41 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x15790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 10)

12:42:41 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000169000/0x800000)=nil, 0x800000, 0x3000, 0x2, &(0x7f000082e000/0x3000)=nil)

12:42:41 executing program 3:
set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db)
syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:42:41 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x2000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300090000000000001100000008000e"], 0x1c}}, 0x0)

12:42:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:42:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 15)

[ 1669.367465] FAULT_INJECTION: forcing a failure.
[ 1669.367465] name failslab, interval 1, probability 0, space 0, times 0
[ 1669.369158] CPU: 1 UID: 0 PID: 12357 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1669.369188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1669.369201] Call Trace:
[ 1669.369209]  <TASK>
[ 1669.369218]  dump_stack_lvl+0xfa/0x120
[ 1669.369259]  should_fail_ex+0x4d7/0x5e0
[ 1669.369299]  ? alloc_empty_file+0x58/0x1e0
[ 1669.369326]  should_failslab+0xc2/0x120
[ 1669.369352]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1669.369385]  ? d_instantiate+0x79/0xa0
[ 1669.369409]  ? lock_release+0xc8/0x290
[ 1669.369441]  alloc_empty_file+0x58/0x1e0
[ 1669.369471]  alloc_file_pseudo+0x12b/0x220
[ 1669.369502]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1669.369557]  __shmem_file_setup+0x1a7/0x370
[ 1669.369595]  alloc_file+0x11c/0x500
[ 1669.369629]  __x64_sys_memfd_create+0x193/0x280
[ 1669.369663]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 1669.369700]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1669.369730]  do_syscall_64+0xbf/0x360
[ 1669.369766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1669.369789] RIP: 0033:0x7f48be4fcb19
[ 1669.369806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1669.369827] RSP: 002b:00007f48bba71f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1669.369849] RAX: ffffffffffffffda RBX: 00000000200023c0 RCX: 00007f48be4fcb19
[ 1669.369870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f48be5560fb
[ 1669.369883] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1669.369896] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1669.369909] R13: 0000000000000000 R14: 00000000007dfffe R15: 0000000000000000
[ 1669.369944]  </TASK>
12:42:41 executing program 4:
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000563000/0x3000)=nil)

12:42:41 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x16790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:41 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x2010, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:42:41 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget(0x3, 0x1000, 0x400, &(0x7f0000d19000/0x1000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/35)
mlock(&(0x7f0000f04000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1672.370715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1672.373561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1672.382552] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1672.388777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1672.392224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1674.467011] Bluetooth: hci7: command tx timeout
[ 1676.514009] Bluetooth: hci7: command tx timeout
[ 1678.562970] Bluetooth: hci7: command tx timeout
[ 1680.611364] Bluetooth: hci7: command tx timeout
[ 1692.530386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1692.531751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1692.579190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1692.580634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:43:15 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 11)

12:43:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000f0000000000001100000008000e"], 0x1c}}, 0x0)

12:43:15 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xedc0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:15 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x17790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:15 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
read$hidraw(r0, &(0x7f0000000000)=""/185, 0xb9)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mlock(&(0x7f000096d000/0x1000)=nil, 0x1000)

12:43:15 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x1, 0x70bd2e, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000d32000/0x4000)=nil, 0x0)
r2 = shmget$private(0x0, 0x2000, 0xc02, &(0x7f0000ffc000/0x2000)=nil)
shmat(r2, &(0x7f0000b68000/0x3000)=nil, 0x1000)
shmctl$IPC_RMID(r2, 0x0)
shmget$private(0x0, 0x2000, 0x200, &(0x7f0000767000/0x2000)=nil)
r3 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r3, &(0x7f0000e17000/0x1000)=nil, 0x4000)
mremap(&(0x7f0000432000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:43:15 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 16)

[ 1703.001432] FAULT_INJECTION: forcing a failure.
[ 1703.001432] name failslab, interval 1, probability 0, space 0, times 0
[ 1703.003070] CPU: 0 UID: 0 PID: 12859 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1703.003089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1703.003098] Call Trace:
[ 1703.003104]  <TASK>
[ 1703.003110]  dump_stack_lvl+0xfa/0x120
[ 1703.003140]  should_fail_ex+0x4d7/0x5e0
[ 1703.003173]  should_failslab+0xc2/0x120
[ 1703.003192]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1703.003216]  ? mark_held_locks+0x49/0x80
[ 1703.003233]  ? rfkill_fop_open+0x1ad/0x700
[ 1703.003264]  rfkill_fop_open+0x1ad/0x700
[ 1703.003292]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1703.003317]  misc_open+0x31e/0x420
[ 1703.003338]  ? __pfx_misc_open+0x10/0x10
[ 1703.003353]  chrdev_open+0x234/0x690
[ 1703.003372]  ? __pfx_chrdev_open+0x10/0x10
[ 1703.003389]  ? lock_release+0xc8/0x290
[ 1703.003421]  do_dentry_open+0x71c/0x1420
[ 1703.003441]  ? __pfx_chrdev_open+0x10/0x10
[ 1703.003470]  vfs_open+0x82/0x3f0
[ 1703.003487]  ? may_open+0x1f3/0x420
[ 1703.003517]  path_openat+0x1c3f/0x2880
[ 1703.003557]  ? __pfx_path_openat+0x10/0x10
[ 1703.003569]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1703.003611]  do_filp_open+0x1e8/0x450
[ 1703.003626]  ? __pfx_do_filp_open+0x10/0x10
[ 1703.003664]  ? find_held_lock+0x2b/0x80
[ 1703.003687]  ? alloc_fd+0x2c1/0x560
[ 1703.003709]  ? lock_release+0xc8/0x290
[ 1703.003738]  ? alloc_fd+0x2c1/0x560
[ 1703.003780]  do_sys_openat2+0x104/0x1b0
[ 1703.003800]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1703.003826]  ? __fget_files+0x20d/0x3b0
[ 1703.003869]  __x64_sys_openat+0x142/0x200
[ 1703.003890]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1703.003908]  ? ksys_write+0x1a3/0x240
[ 1703.003933]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1703.003959]  do_syscall_64+0xbf/0x360
[ 1703.003986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1703.004001] RIP: 0033:0x7f2a74959b19
[ 1703.004013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1703.004026] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1703.004040] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1703.004050] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1703.004058] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1703.004067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1703.004075] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1703.004117]  </TASK>
12:43:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103001c0000000000001100000008000e"], 0x1c}}, 0x0)

12:43:15 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x18790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 12)

12:43:15 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 17)

12:43:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300bb0000000000001100000008000e"], 0x1c}}, 0x0)

[ 1703.271338] FAULT_INJECTION: forcing a failure.
[ 1703.271338] name failslab, interval 1, probability 0, space 0, times 0
[ 1703.273219] CPU: 1 UID: 0 PID: 12884 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1703.273249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1703.273262] Call Trace:
[ 1703.273270]  <TASK>
[ 1703.273278]  dump_stack_lvl+0xfa/0x120
[ 1703.273318]  should_fail_ex+0x4d7/0x5e0
[ 1703.273358]  ? security_file_alloc+0x35/0x130
[ 1703.273388]  should_failslab+0xc2/0x120
[ 1703.273414]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1703.273449]  ? __create_object+0x59/0x80
[ 1703.273485]  security_file_alloc+0x35/0x130
[ 1703.273517]  init_file+0x95/0x4c0
[ 1703.273546]  alloc_empty_file+0x76/0x1e0
[ 1703.273576]  alloc_file_pseudo+0x12b/0x220
[ 1703.273607]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1703.273648]  __shmem_file_setup+0x1a7/0x370
[ 1703.273686]  alloc_file+0x11c/0x500
[ 1703.273719]  __x64_sys_memfd_create+0x193/0x280
[ 1703.273753]  ? __pfx___x64_sys_memfd_create+0x10/0x10
[ 1703.273789]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1703.273819]  do_syscall_64+0xbf/0x360
[ 1703.273856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1703.273886] RIP: 0033:0x7f48be4fcb19
[ 1703.273903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1703.273924] RSP: 002b:00007f48bba71f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1703.273945] RAX: ffffffffffffffda RBX: 00000000200023c0 RCX: 00007f48be4fcb19
[ 1703.273959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f48be5560fb
[ 1703.273973] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1703.273986] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 1703.274000] R13: 0000000000000000 R14: 00000000007dfffe R15: 0000000000000000
[ 1703.274035]  </TASK>
12:43:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 13)

12:43:25 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300f00000000000001100000008000e"], 0x1c}}, 0x0)

12:43:25 executing program 4:
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:43:25 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x19790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:25 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x80000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:25 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:25 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 18)

12:43:25 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = inotify_init1(0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000943000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00004de000/0x3000)=nil, &(0x7f0000478000/0x2000)=nil, &(0x7f0000422000/0x1000)=nil, &(0x7f0000e8f000/0x4000)=nil, &(0x7f0000e61000/0x2000)=nil, &(0x7f0000748000/0x4000)=nil, &(0x7f0000e0e000/0x1000)=nil, &(0x7f0000000000)="61e7440a1acec4909e95d30fcef77cae9c100aeda5f2179211f9eac316e5d1ad879dee648a4c4bd3fd5a25d6223a1fb53cb54fbc07eae2ecdacb518654acfaaeb37e6cebc0deb5a8b76a075a6b202d77ececd277fb7c8fe45777d6b0cb9749855b1a5e98edfe08e00fa573b2af2de74a82e644c24e992af6df6197151a7c9655c3caeec4fbf7b57150a8b5f4d8d96138c81f421c2a5800df19a774720f907f916c47eb968161dc38ca520a501ea89a2fa3386354e61e835f67ebce54890d59eb9851faaf5f841d43eb1927f7c4f147cec8cfa79603620509e3252ab8263ec38f27fabd1207672dd0da716d59a9ef56", 0xef, r0}, 0x68)

12:43:25 executing program 3:
shmat(0x0, &(0x7f0000fa8000/0x4000)=nil, 0x1000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:43:25 executing program 4:
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
sigaltstack(&(0x7f0000934000/0x3000)=nil, &(0x7f0000000000))
madvise(&(0x7f0000440000/0x3000)=nil, 0x3000, 0x65)

12:43:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 14)

[ 1713.074198] FAULT_INJECTION: forcing a failure.
[ 1713.074198] name failslab, interval 1, probability 0, space 0, times 0
[ 1713.075853] CPU: 0 UID: 0 PID: 12902 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1713.075889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1713.075903] Call Trace:
[ 1713.075912]  <TASK>
[ 1713.075923]  dump_stack_lvl+0xfa/0x120
[ 1713.075972]  should_fail_ex+0x4d7/0x5e0
[ 1713.076025]  should_failslab+0xc2/0x120
[ 1713.076055]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1713.076095]  ? mark_held_locks+0x49/0x80
[ 1713.076122]  ? rfkill_fop_open+0x1ad/0x700
[ 1713.076171]  rfkill_fop_open+0x1ad/0x700
[ 1713.076217]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1713.076258]  misc_open+0x31e/0x420
[ 1713.076291]  ? __pfx_misc_open+0x10/0x10
[ 1713.076315]  chrdev_open+0x234/0x690
[ 1713.076346]  ? __pfx_chrdev_open+0x10/0x10
[ 1713.076373]  ? lock_release+0xc8/0x290
[ 1713.076426]  do_dentry_open+0x71c/0x1420
[ 1713.076458]  ? __pfx_chrdev_open+0x10/0x10
[ 1713.076505]  vfs_open+0x82/0x3f0
[ 1713.076533]  ? may_open+0x1f3/0x420
[ 1713.076578]  path_openat+0x1c3f/0x2880
[ 1713.076644]  ? __pfx_path_openat+0x10/0x10
[ 1713.076663]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1713.076733]  do_filp_open+0x1e8/0x450
[ 1713.076758]  ? __pfx_do_filp_open+0x10/0x10
[ 1713.076821]  ? find_held_lock+0x2b/0x80
[ 1713.076856]  ? alloc_fd+0x2c1/0x560
[ 1713.076892]  ? lock_release+0xc8/0x290
[ 1713.076939]  ? alloc_fd+0x2c1/0x560
[ 1713.077008]  do_sys_openat2+0x104/0x1b0
[ 1713.077040]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1713.077083]  ? __fget_files+0x20d/0x3b0
[ 1713.077144]  __x64_sys_openat+0x142/0x200
[ 1713.077177]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1713.077205]  ? ksys_write+0x1a3/0x240
[ 1713.077246]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1713.077288]  do_syscall_64+0xbf/0x360
[ 1713.077332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1713.077355] RIP: 0033:0x7f2a74959b19
[ 1713.077373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1713.077395] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1713.077416] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1713.077431] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1713.077444] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1713.077458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1713.077471] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1713.077541]  </TASK>
[ 1713.120990] FAULT_INJECTION: forcing a failure.
[ 1713.120990] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1713.122279] CPU: 1 UID: 0 PID: 12913 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1713.122306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1713.122314] Call Trace:
[ 1713.122319]  <TASK>
[ 1713.122324]  dump_stack_lvl+0xfa/0x120
[ 1713.122352]  should_fail_ex+0x4d7/0x5e0
[ 1713.122377]  should_fail_alloc_page+0xe0/0x110
[ 1713.122394]  prepare_alloc_pages+0x1af/0x500
[ 1713.122416]  __alloc_frozen_pages_noprof+0x17f/0x1f10
[ 1713.122435]  ? lock_acquire+0x15e/0x2f0
[ 1713.122452]  ? find_held_lock+0x2b/0x80
[ 1713.122470]  ? __is_insn_slot_addr+0x136/0x290
[ 1713.122490]  ? lock_release+0xc8/0x290
[ 1713.122504]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1713.122520]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1713.122541]  ? perf_trace_lock+0xb5/0x5d0
[ 1713.122558]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1713.122572]  ? lock_is_held_type+0x9e/0x120
[ 1713.122592]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1713.122608]  ? policy_nodemask+0xeb/0x4e0
[ 1713.122628]  alloc_pages_mpol+0xed/0x340
[ 1713.122645]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1713.122660]  ? filemap_get_entry+0x1bb/0x3b0
[ 1713.122674]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1713.122691]  folio_alloc_mpol_noprof+0x38/0x2a0
[ 1713.122712]  shmem_alloc_folio+0x11b/0x140
[ 1713.122730]  shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
[ 1713.122758]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1713.122781]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1713.122794]  ? simple_xattr_get+0x173/0x1d0
[ 1713.122813]  shmem_write_begin+0x147/0x2e0
[ 1713.122833]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1713.122849]  ? timestamp_truncate+0x1eb/0x2f0
[ 1713.122867]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1713.122882]  ? __pfx_timestamp_truncate+0x10/0x10
[ 1713.122899]  generic_perform_write+0x392/0x810
[ 1713.122924]  ? __pfx_generic_perform_write+0x10/0x10
[ 1713.122943]  ? inode_needs_update_time.part.0+0x170/0x270
[ 1713.122962]  shmem_file_write_iter+0x111/0x140
[ 1713.122979]  vfs_write+0xbe9/0x10c0
[ 1713.122993]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1713.123008]  ? __fget_files+0x34/0x3b0
[ 1713.123027]  ? __pfx_vfs_write+0x10/0x10
[ 1713.123054]  __x64_sys_pwrite64+0x1f1/0x260
[ 1713.123068]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1713.123080]  ? fput+0x6a/0x100
[ 1713.123095]  ? do_sys_ftruncate+0x81/0xb0
[ 1713.123111]  do_syscall_64+0xbf/0x360
[ 1713.123132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1713.123144] RIP: 0033:0x7f48be4afab7
[ 1713.123154] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1713.123166] RSP: 002b:00007f48bba71f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1713.123178] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afab7
[ 1713.123186] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005
[ 1713.123193] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1713.123200] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000005
[ 1713.123207] R13: 0000000000000005 R14: 00000000200023c0 R15: 0000000000000000
[ 1713.123226]  </TASK>
12:43:25 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000900000000001100000008000e"], 0x1c}}, 0x0)

12:43:25 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000fef000/0xe000)=nil, 0x1800)
munlock(&(0x7f000061b000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:43:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300c00e00000000001100000008000e"], 0x1c}}, 0x0)

12:43:35 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000e2d000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0x8, 0x0, 0x2)
mbind(&(0x7f0000f67000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0x5a6, 0xfffffffffffffffd, 0x2)

12:43:35 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:35 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1a790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:35 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 19)

12:43:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 15)

12:43:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000f00000000001100000008000e"], 0x1c}}, 0x0)

12:43:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x2da, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 1723.585694] FAULT_INJECTION: forcing a failure.
[ 1723.585694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1723.587180] CPU: 0 UID: 0 PID: 12935 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1723.587198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1723.587206] Call Trace:
[ 1723.587211]  <TASK>
[ 1723.587217]  dump_stack_lvl+0xfa/0x120
[ 1723.587248]  should_fail_ex+0x4d7/0x5e0
[ 1723.587269]  ? page_copy_sane+0xce/0x2b0
[ 1723.587296]  copy_folio_from_iter_atomic+0x3d3/0x1820
[ 1723.587330]  ? simple_xattr_get+0x173/0x1d0
[ 1723.587354]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1723.587369]  ? shmem_write_begin+0x15e/0x2e0
[ 1723.587394]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1723.587410]  ? timestamp_truncate+0x1eb/0x2f0
[ 1723.587427]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1723.587443]  ? __pfx_timestamp_truncate+0x10/0x10
[ 1723.587466]  generic_perform_write+0x1d7/0x810
[ 1723.587506]  ? __pfx_generic_perform_write+0x10/0x10
[ 1723.587530]  ? inode_needs_update_time.part.0+0x170/0x270
[ 1723.587559]  shmem_file_write_iter+0x111/0x140
[ 1723.587580]  vfs_write+0xbe9/0x10c0
[ 1723.587597]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1723.587614]  ? __fget_files+0x34/0x3b0
[ 1723.587634]  ? __pfx_vfs_write+0x10/0x10
[ 1723.587688]  __x64_sys_pwrite64+0x1f1/0x260
[ 1723.587704]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1723.587719]  ? fput+0x6a/0x100
[ 1723.587736]  ? do_sys_ftruncate+0x81/0xb0
[ 1723.587759]  do_syscall_64+0xbf/0x360
[ 1723.587782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1723.587796] RIP: 0033:0x7f48be4afab7
[ 1723.587806] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1723.587819] RSP: 002b:00007f48bba71f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1723.587830] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afab7
[ 1723.587838] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005
[ 1723.587846] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1723.587853] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000005
[ 1723.587865] R13: 0000000000000005 R14: 00000000200023c0 R15: 0000000000000000
[ 1723.587902]  </TASK>
12:43:35 executing program 3:
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f000041c000/0x1000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000c23000/0x2000)=nil, 0x0)
mremap(&(0x7f0000a5d000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000563000/0x3000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
mbind(&(0x7f0000400000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000), 0x9, 0x6)

12:43:35 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1b790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:35 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 20)

12:43:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 16)

12:43:35 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x2000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300001c00000000001100000008000e"], 0x1c}}, 0x0)

12:43:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 1723.791328] FAULT_INJECTION: forcing a failure.
[ 1723.791328] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1723.793283] CPU: 0 UID: 0 PID: 12951 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1723.793313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1723.793326] Call Trace:
[ 1723.793335]  <TASK>
[ 1723.793345]  dump_stack_lvl+0xfa/0x120
[ 1723.793389]  should_fail_ex+0x4d7/0x5e0
[ 1723.793441]  should_fail_alloc_page+0xe0/0x110
[ 1723.793474]  prepare_alloc_pages+0x1af/0x500
[ 1723.793523]  __alloc_frozen_pages_noprof+0x17f/0x1f10
[ 1723.793561]  ? perf_trace_lock+0x337/0x5d0
[ 1723.793610]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1723.793645]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1723.793686]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1723.793729]  ? perf_trace_lock+0x337/0x5d0
[ 1723.793777]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1723.793807]  ? lock_is_held_type+0x9e/0x120
[ 1723.793851]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1723.793897]  ? policy_nodemask+0xeb/0x4e0
[ 1723.793943]  alloc_pages_mpol+0xed/0x340
[ 1723.793980]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1723.794009]  ? filemap_get_entry+0x1bb/0x3b0
[ 1723.794035]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1723.794082]  folio_alloc_mpol_noprof+0x38/0x2a0
[ 1723.794129]  shmem_alloc_folio+0x11b/0x140
[ 1723.794170]  shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0
[ 1723.794236]  ? perf_trace_lock+0x337/0x5d0
[ 1723.794265]  ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10
[ 1723.794316]  ? __pfx_perf_trace_lock+0x10/0x10
[ 1723.794367]  shmem_write_begin+0x147/0x2e0
[ 1723.794411]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1723.794442]  ? timestamp_truncate+0x1eb/0x2f0
[ 1723.794485]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1723.794512]  ? __pfx_timestamp_truncate+0x10/0x10
[ 1723.794556]  generic_perform_write+0x392/0x810
[ 1723.794625]  ? __pfx_generic_perform_write+0x10/0x10
[ 1723.794670]  ? inode_needs_update_time.part.0+0x170/0x270
[ 1723.794724]  shmem_file_write_iter+0x111/0x140
[ 1723.794763]  vfs_write+0xbe9/0x10c0
[ 1723.794793]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1723.794825]  ? __fget_files+0x34/0x3b0
[ 1723.794862]  ? __pfx_vfs_write+0x10/0x10
[ 1723.794958]  __x64_sys_pwrite64+0x1f1/0x260
[ 1723.794987]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1723.795014]  ? fput+0x6a/0x100
[ 1723.795044]  ? do_sys_ftruncate+0x81/0xb0
[ 1723.795086]  do_syscall_64+0xbf/0x360
[ 1723.795129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1723.795152] RIP: 0033:0x7f48be4afab7
[ 1723.795170] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1723.795191] RSP: 002b:00007f48bba71f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1723.795212] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afab7
[ 1723.795227] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000005
[ 1723.795240] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1723.795254] R10: 00000000003effff R11: 0000000000000293 R12: 0000000000000005
[ 1723.795267] R13: 0000000000000005 R14: 00000000200023d8 R15: 0000000000000001
[ 1723.795333]  </TASK>
[ 1723.809183] FAULT_INJECTION: forcing a failure.
[ 1723.809183] name failslab, interval 1, probability 0, space 0, times 0
[ 1723.843000] CPU: 1 UID: 0 PID: 12955 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1723.843032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1723.843046] Call Trace:
[ 1723.843055]  <TASK>
[ 1723.843064]  dump_stack_lvl+0xfa/0x120
[ 1723.843108]  should_fail_ex+0x4d7/0x5e0
[ 1723.843151]  should_failslab+0xc2/0x120
[ 1723.843178]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1723.843213]  ? mark_held_locks+0x49/0x80
[ 1723.843239]  ? rfkill_fop_open+0x1ad/0x700
[ 1723.843276]  rfkill_fop_open+0x1ad/0x700
[ 1723.843312]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1723.843346]  misc_open+0x31e/0x420
[ 1723.843374]  ? __pfx_misc_open+0x10/0x10
[ 1723.843396]  chrdev_open+0x234/0x690
[ 1723.843422]  ? __pfx_chrdev_open+0x10/0x10
[ 1723.843447]  ? lock_release+0xc8/0x290
[ 1723.843485]  do_dentry_open+0x71c/0x1420
[ 1723.843511]  ? __pfx_chrdev_open+0x10/0x10
[ 1723.843543]  vfs_open+0x82/0x3f0
[ 1723.843570]  ? may_open+0x1f3/0x420
[ 1723.843604]  path_openat+0x1c3f/0x2880
[ 1723.843643]  ? __pfx_path_openat+0x10/0x10
[ 1723.843664]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1723.843703]  do_filp_open+0x1e8/0x450
[ 1723.843724]  ? __pfx_do_filp_open+0x10/0x10
[ 1723.843762]  ? find_held_lock+0x2b/0x80
[ 1723.843793]  ? alloc_fd+0x2c1/0x560
[ 1723.843826]  ? lock_release+0xc8/0x290
[ 1723.843858]  ? alloc_fd+0x2c1/0x560
[ 1723.843911]  do_sys_openat2+0x104/0x1b0
[ 1723.843940]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1723.843975]  ? __fget_files+0x20d/0x3b0
[ 1723.844021]  __x64_sys_openat+0x142/0x200
[ 1723.844050]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1723.844078]  ? ksys_write+0x1a3/0x240
[ 1723.844106]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1723.844137]  do_syscall_64+0xbf/0x360
[ 1723.844174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1723.844196] RIP: 0033:0x7f2a74959b19
[ 1723.844214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1723.844235] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1723.844257] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1723.844272] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1723.844286] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1723.844299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1723.844312] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1723.844348]  </TASK>
12:43:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 17)

12:43:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1c790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000bb00000000001100000008000e"], 0x1c}}, 0x0)

12:43:36 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:36 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x7000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:46 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x8000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:46 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000b7c000/0x400000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_RMID(r0, 0x0)
r1 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
mbind(&(0x7f00004a9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x400, 0x20, 0x1)
shmat(r1, &(0x7f00009a8000/0x2000)=nil, 0x4000)
r2 = shmget(0x0, 0x2000, 0x800, &(0x7f000061b000/0x2000)=nil)
shmat(r2, &(0x7f0000e29000/0x1000)=nil, 0x6000)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
mbind(&(0x7f0000fac000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000), 0x2, 0x2)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x11)

12:43:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 21)

12:43:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 18)

12:43:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000ec000000000001100000008000e"], 0x1c}}, 0x0)

12:43:46 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1d790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:46 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000)
r1 = pkey_alloc(0x0, 0x1)
shmat(0x0, &(0x7f0000e99000/0x1000)=nil, 0x2000)
pkey_mprotect(&(0x7f0000eb7000/0xd000)=nil, 0xd000, 0x1000000, r1)
mbind(&(0x7f0000e11000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x4)

12:43:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 22)

12:43:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x1c00, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:46 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2819b4bf9f04"])
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000a000}, 0xc010)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:43:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 19)

[ 1734.407478] FAULT_INJECTION: forcing a failure.
[ 1734.407478] name failslab, interval 1, probability 0, space 0, times 0
[ 1734.408796] CPU: 0 UID: 0 PID: 13005 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1734.408813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1734.408821] Call Trace:
[ 1734.408826]  <TASK>
[ 1734.408831]  dump_stack_lvl+0xfa/0x120
[ 1734.408866]  should_fail_ex+0x4d7/0x5e0
[ 1734.408896]  should_failslab+0xc2/0x120
[ 1734.408917]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1734.408940]  ? mark_held_locks+0x49/0x80
[ 1734.408955]  ? rfkill_fop_open+0x1ad/0x700
[ 1734.408981]  rfkill_fop_open+0x1ad/0x700
[ 1734.409006]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1734.409028]  misc_open+0x31e/0x420
[ 1734.409047]  ? __pfx_misc_open+0x10/0x10
[ 1734.409060]  chrdev_open+0x234/0x690
[ 1734.409077]  ? __pfx_chrdev_open+0x10/0x10
[ 1734.409092]  ? lock_release+0xc8/0x290
[ 1734.409120]  do_dentry_open+0x71c/0x1420
[ 1734.409138]  ? __pfx_chrdev_open+0x10/0x10
[ 1734.409163]  vfs_open+0x82/0x3f0
[ 1734.409178]  ? may_open+0x1f3/0x420
[ 1734.409203]  path_openat+0x1c3f/0x2880
[ 1734.409237]  ? __pfx_path_openat+0x10/0x10
[ 1734.409248]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1734.409285]  do_filp_open+0x1e8/0x450
[ 1734.409298]  ? __pfx_do_filp_open+0x10/0x10
[ 1734.409332]  ? find_held_lock+0x2b/0x80
[ 1734.409351]  ? alloc_fd+0x2c1/0x560
[ 1734.409371]  ? lock_release+0xc8/0x290
[ 1734.409396]  ? alloc_fd+0x2c1/0x560
[ 1734.409433]  do_sys_openat2+0x104/0x1b0
[ 1734.409451]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1734.409474]  ? __fget_files+0x20d/0x3b0
[ 1734.409506]  __x64_sys_openat+0x142/0x200
[ 1734.409525]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1734.409540]  ? ksys_write+0x1a3/0x240
[ 1734.409563]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1734.409585]  do_syscall_64+0xbf/0x360
[ 1734.409609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1734.409623] RIP: 0033:0x7f2a74959b19
[ 1734.409633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1734.409645] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1734.409657] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1734.409665] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1734.409672] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1734.409680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1734.409687] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1734.409723]  </TASK>
12:43:46 executing program 4:
shmat(0x0, &(0x7f0000561000/0x4000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:43:46 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x9000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1e790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:57 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xa000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:43:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 20)

12:43:57 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 23)

12:43:57 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00'])
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:43:57 executing program 4:
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f00005f8000/0x1000)=nil, 0x1000, 0x3)

12:43:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xda02, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:43:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000f000000000001100000008000e"], 0x1c}}, 0x0)

12:43:57 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 24)

[ 1745.190121] FAULT_INJECTION: forcing a failure.
[ 1745.190121] name failslab, interval 1, probability 0, space 0, times 0
[ 1745.191823] CPU: 0 UID: 0 PID: 13049 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1745.191852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1745.191872] Call Trace:
[ 1745.191881]  <TASK>
[ 1745.191892]  dump_stack_lvl+0xfa/0x120
[ 1745.191943]  should_fail_ex+0x4d7/0x5e0
[ 1745.191996]  should_failslab+0xc2/0x120
[ 1745.192027]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1745.192067]  ? mark_held_locks+0x49/0x80
[ 1745.192094]  ? rfkill_fop_open+0x1ad/0x700
[ 1745.192144]  rfkill_fop_open+0x1ad/0x700
[ 1745.192191]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1745.192233]  misc_open+0x31e/0x420
[ 1745.192267]  ? __pfx_misc_open+0x10/0x10
[ 1745.192291]  chrdev_open+0x234/0x690
[ 1745.192323]  ? __pfx_chrdev_open+0x10/0x10
[ 1745.192350]  ? lock_release+0xc8/0x290
[ 1745.192403]  do_dentry_open+0x71c/0x1420
[ 1745.192437]  ? __pfx_chrdev_open+0x10/0x10
[ 1745.192484]  vfs_open+0x82/0x3f0
[ 1745.192514]  ? may_open+0x1f3/0x420
[ 1745.192559]  path_openat+0x1c3f/0x2880
[ 1745.192626]  ? __pfx_path_openat+0x10/0x10
[ 1745.192646]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1745.192713]  do_filp_open+0x1e8/0x450
[ 1745.192738]  ? __pfx_do_filp_open+0x10/0x10
[ 1745.192803]  ? find_held_lock+0x2b/0x80
[ 1745.192844]  ? alloc_fd+0x2c1/0x560
[ 1745.192882]  ? lock_release+0xc8/0x290
[ 1745.192929]  ? alloc_fd+0x2c1/0x560
[ 1745.193000]  do_sys_openat2+0x104/0x1b0
[ 1745.193033]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1745.193075]  ? __fget_files+0x20d/0x3b0
[ 1745.193139]  __x64_sys_openat+0x142/0x200
[ 1745.193174]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1745.193203]  ? ksys_write+0x1a3/0x240
[ 1745.193245]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1745.193288]  do_syscall_64+0xbf/0x360
[ 1745.193334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1745.193359] RIP: 0033:0x7f2a74959b19
[ 1745.193379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1745.193401] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1745.193423] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1745.193437] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1745.193451] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1745.193465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1745.193478] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1745.193546]  </TASK>
12:44:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000008000000001100000008000e"], 0x1c}}, 0x0)

12:44:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 21)

12:44:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 25)

12:44:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xb000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:07 executing program 4:
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x4008, 0x5)

12:44:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1f790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:07 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="ead525718620472c7766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x128, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa2b9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x1)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:44:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x10000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:07 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000816000/0x4000)=nil, 0x1000)
munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:44:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x20000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 22)

12:44:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300fffff0000000001100000008000e"], 0x1c}}, 0x0)

12:44:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 26)

12:44:07 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000fb3000/0x4000)=nil, 0x5000)
shmget$private(0x0, 0x1000, 0x10, &(0x7f000091c000/0x1000)=nil)
shmctl$IPC_RMID(r0, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000c77000/0x3000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:44:07 executing program 4:
shmat(0xffffffffffffffff, &(0x7f0000522000/0x2000)=nil, 0x4000)
r0 = shmget(0x0, 0x1000, 0x200, &(0x7f0000916000/0x1000)=nil)
r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f00005bb000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmctl$IPC_RMID(r0, 0x0)
mremap(&(0x7f000051e000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f000062c000/0x2000)=nil)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
remap_file_pages(&(0x7f0000f4f000/0x1000)=nil, 0x1000, 0x2000000, 0x8, 0x100000)

12:44:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:07 executing program 3:
r0 = memfd_secret(0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20008000)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000440)={"9c6a04d2c3aef3e76f74901d", &(0x7f0000000300)="b9f8ab2b8a58799e897e80e6254842f14bbc48bed93595c464293426f8cb7068e60a9cae700096af7f5d59a6b1f196a911b5df6ac57dded7cfeaa9fcd7e877db45e79eb4a1822445969a43248685573f7c88bc3928c67a44d9bd0ae6d6f80d783e8954be8a5b63c909f21f619daab8f9c22ad460f6db12a3c7dfe4b98924fd14a6ed335078097c49c8ca435f53a7e0692d1fd3d1ee9aa86fa951b63c0ee9993e705658a6127b40465c15f75a8340deaf", 0xb0, 0x9, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0xc, 0x0, 0x0, 0x0, "6b6e2f0f", 0x40, "478994da", 0x40, 0x0, 0x8, "409755", "a96b5f9b1b8b723c821ab1733c107c6f920d8e5212c21a3390a15a8d9e3d142853a6fa7bf38c9de01075b0650dd4"}, 0x0, 0x6, 0x1, &(0x7f0000000400)})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mlock(&(0x7f00006a7000/0x1000)=nil, 0x1000)
get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0xf76, &(0x7f00004a1000/0x2000)=nil, 0x0)
mremap(&(0x7f0000647000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000563000/0x3000)=nil)
sigaltstack(&(0x7f0000a23000/0x2000)=nil, &(0x7f0000000040))

[ 1755.763208] FAULT_INJECTION: forcing a failure.
[ 1755.763208] name failslab, interval 1, probability 0, space 0, times 0
[ 1755.768220] CPU: 1 UID: 0 PID: 13101 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1755.768255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1755.768269] Call Trace:
[ 1755.768277]  <TASK>
[ 1755.768286]  dump_stack_lvl+0xfa/0x120
12:44:07 executing program 4:
shmat(0x0, &(0x7f0000f76000/0x2000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(0x0, &(0x7f0000563000/0x2000)=nil, 0x0)

[ 1755.768333]  should_fail_ex+0x4d7/0x5e0
[ 1755.768379]  should_failslab+0xc2/0x120
[ 1755.768410]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1755.768447]  ? mark_held_locks+0x49/0x80
[ 1755.768473]  ? rfkill_fop_open+0x1ad/0x700
[ 1755.768514]  rfkill_fop_open+0x1ad/0x700
[ 1755.768553]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1755.768589]  misc_open+0x31e/0x420
[ 1755.768618]  ? __pfx_misc_open+0x10/0x10
[ 1755.768642]  chrdev_open+0x234/0x690
[ 1755.768670]  ? __pfx_chrdev_open+0x10/0x10
[ 1755.768696]  ? lock_release+0xc8/0x290
[ 1755.768733]  do_dentry_open+0x71c/0x1420
[ 1755.768761]  ? __pfx_chrdev_open+0x10/0x10
[ 1755.768796]  vfs_open+0x82/0x3f0
[ 1755.768824]  ? may_open+0x1f3/0x420
[ 1755.768868]  path_openat+0x1c3f/0x2880
[ 1755.768911]  ? __pfx_path_openat+0x10/0x10
[ 1755.768934]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1755.768975]  do_filp_open+0x1e8/0x450
[ 1755.768999]  ? __pfx_do_filp_open+0x10/0x10
[ 1755.769042]  ? find_held_lock+0x2b/0x80
[ 1755.769076]  ? alloc_fd+0x2c1/0x560
[ 1755.769111]  ? lock_release+0xc8/0x290
[ 1755.769146]  ? alloc_fd+0x2c1/0x560
[ 1755.769195]  do_sys_openat2+0x104/0x1b0
[ 1755.769226]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1755.769261]  ? __fget_files+0x20d/0x3b0
[ 1755.769309]  __x64_sys_openat+0x142/0x200
[ 1755.769341]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1755.769370]  ? ksys_write+0x1a3/0x240
[ 1755.769401]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1755.769434]  do_syscall_64+0xbf/0x360
[ 1755.769473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1755.769497] RIP: 0033:0x7f2a74959b19
[ 1755.769516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1755.769539] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1755.769561] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1755.769577] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1755.769592] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1755.769606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1755.769621] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1755.769661]  </TASK>
12:44:17 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x20100000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000010000001100000008000e"], 0x1c}}, 0x0)

12:44:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 23)

12:44:17 executing program 3:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2b3b41d1ed436db9}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "16b95caa0f62f4a8390121a864e75bcf4a606c4a6ec41f65007a907ce42a63f06ced25c80a8f218ae462650b574ba7c8a6a1010878beef8b67363292966cc748ce95acc59d099904aba1eda6f8194c2810d1a1670f2d54393e86a6198f90818df032df2307cda783ed31dd734fe97f48f6e7d9b936d8eb8fa33f"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffbff}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x82, @dev={0xfe, 0x80, '\x00', 0x26}, 0x3313}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a5d}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:44:17 executing program 4:
shmat(0xffffffffffffffff, &(0x7f0000e1a000/0x3000)=nil, 0x1000)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000e19000/0x4000)=nil)

12:44:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 27)

[ 1765.631512] FAULT_INJECTION: forcing a failure.
[ 1765.631512] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1765.632612] CPU: 1 UID: 0 PID: 13121 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1765.632629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1765.632638] Call Trace:
[ 1765.632642]  <TASK>
[ 1765.632647]  dump_stack_lvl+0xfa/0x120
[ 1765.632676]  should_fail_ex+0x4d7/0x5e0
[ 1765.632696]  ? page_copy_sane+0xce/0x2b0
[ 1765.632718]  copy_folio_from_iter_atomic+0x3d3/0x1820
[ 1765.632747]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1765.632761]  ? shmem_write_begin+0x15e/0x2e0
[ 1765.632783]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1765.632799]  ? timestamp_truncate+0x1eb/0x2f0
[ 1765.632814]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190
[ 1765.632830]  ? __pfx_timestamp_truncate+0x10/0x10
[ 1765.632847]  generic_perform_write+0x1d7/0x810
[ 1765.632880]  ? __pfx_generic_perform_write+0x10/0x10
[ 1765.632899]  ? inode_needs_update_time.part.0+0x170/0x270
[ 1765.632921]  shmem_file_write_iter+0x111/0x140
[ 1765.632938]  vfs_write+0xbe9/0x10c0
[ 1765.632951]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1765.632967]  ? __fget_files+0x34/0x3b0
[ 1765.632985]  ? __pfx_vfs_write+0x10/0x10
[ 1765.633013]  __x64_sys_pwrite64+0x1f1/0x260
[ 1765.633026]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1765.633039]  ? fput+0x6a/0x100
[ 1765.633053]  ? do_sys_ftruncate+0x81/0xb0
[ 1765.633069]  do_syscall_64+0xbf/0x360
[ 1765.633090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.633103] RIP: 0033:0x7f48be4afab7
[ 1765.633112] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 1765.633124] RSP: 002b:00007f48bba71f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 1765.633136] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afab7
[ 1765.633144] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000005
[ 1765.633151] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 1765.633159] R10: 00000000003effff R11: 0000000000000293 R12: 0000000000000005
[ 1765.633166] R13: 0000000000000005 R14: 00000000200023d8 R15: 0000000000000001
[ 1765.633185]  </TASK>
12:44:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 28)

[ 1765.708970] FAULT_INJECTION: forcing a failure.
[ 1765.708970] name failslab, interval 1, probability 0, space 0, times 0
[ 1765.709896] CPU: 1 UID: 0 PID: 13130 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1765.709912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1765.709919] Call Trace:
[ 1765.709924]  <TASK>
[ 1765.709928]  dump_stack_lvl+0xfa/0x120
[ 1765.709955]  should_fail_ex+0x4d7/0x5e0
[ 1765.709978]  should_failslab+0xc2/0x120
[ 1765.709993]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1765.710013]  ? mark_held_locks+0x49/0x80
[ 1765.710026]  ? rfkill_fop_open+0x1ad/0x700
[ 1765.710047]  rfkill_fop_open+0x1ad/0x700
[ 1765.710067]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1765.710085]  misc_open+0x31e/0x420
[ 1765.710101]  ? __pfx_misc_open+0x10/0x10
[ 1765.710113]  chrdev_open+0x234/0x690
[ 1765.710127]  ? __pfx_chrdev_open+0x10/0x10
[ 1765.710140]  ? lock_release+0xc8/0x290
[ 1765.710159]  do_dentry_open+0x71c/0x1420
[ 1765.710174]  ? __pfx_chrdev_open+0x10/0x10
[ 1765.710191]  vfs_open+0x82/0x3f0
[ 1765.710205]  ? may_open+0x1f3/0x420
[ 1765.710225]  path_openat+0x1c3f/0x2880
[ 1765.710249]  ? __pfx_path_openat+0x10/0x10
[ 1765.710261]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1765.710282]  do_filp_open+0x1e8/0x450
[ 1765.710293]  ? __pfx_do_filp_open+0x10/0x10
[ 1765.710315]  ? find_held_lock+0x2b/0x80
[ 1765.710332]  ? alloc_fd+0x2c1/0x560
[ 1765.710350]  ? lock_release+0xc8/0x290
[ 1765.710368]  ? alloc_fd+0x2c1/0x560
[ 1765.710393]  do_sys_openat2+0x104/0x1b0
[ 1765.710409]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1765.710427]  ? __fget_files+0x20d/0x3b0
[ 1765.710450]  __x64_sys_openat+0x142/0x200
[ 1765.710467]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1765.710482]  ? ksys_write+0x1a3/0x240
[ 1765.710497]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1765.710513]  do_syscall_64+0xbf/0x360
[ 1765.710534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.710545] RIP: 0033:0x7f2a74959b19
[ 1765.710555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1765.710566] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1765.710578] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1765.710586] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1765.710593] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1765.710601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1765.710608] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1765.710627]  </TASK>
12:44:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 29)

12:44:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 24)

12:44:17 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000d84000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000c76000/0x4000)=nil)
madvise(&(0x7f00009cc000/0x2000)=nil, 0x2000, 0x2)
shmat(0x0, &(0x7f000073b000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000c21000/0x2000)=nil, 0x2000)

[ 1765.859404] FAULT_INJECTION: forcing a failure.
[ 1765.859404] name failslab, interval 1, probability 0, space 0, times 0
[ 1765.860476] CPU: 1 UID: 0 PID: 13141 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1765.860492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1765.860500] Call Trace:
[ 1765.860504]  <TASK>
[ 1765.860509]  dump_stack_lvl+0xfa/0x120
[ 1765.860536]  should_fail_ex+0x4d7/0x5e0
[ 1765.860562]  ? getname_flags.part.0+0x48/0x540
[ 1765.860579]  should_failslab+0xc2/0x120
[ 1765.860595]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1765.860622]  getname_flags.part.0+0x48/0x540
[ 1765.860640]  getname_flags+0x95/0xe0
[ 1765.860659]  do_sys_openat2+0x9f/0x1b0
[ 1765.860676]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1765.860704]  __x64_sys_openat+0x142/0x200
[ 1765.860720]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1765.860738]  ? fput+0x6a/0x100
[ 1765.860753]  ? do_sys_ftruncate+0x81/0xb0
[ 1765.860769]  do_syscall_64+0xbf/0x360
[ 1765.860789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.860802] RIP: 0033:0x7f48be4afa04
[ 1765.860811] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1765.860824] RSP: 002b:00007f48bba71ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1765.860835] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afa04
[ 1765.860843] RDX: 0000000000000002 RSI: 00007f48bba72000 RDI: 00000000ffffff9c
[ 1765.860851] RBP: 00007f48bba72000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1765.860863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1765.860870] R13: 0000000000000005 R14: 0000000020002408 R15: 0000000000000003
[ 1765.860889]  </TASK>
12:44:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000020000001100000008000e"], 0x1c}}, 0x0)

12:44:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 30)

12:44:27 executing program 3:
r0 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300002000000000403f"], 0xa, 0xffffffffffffffff)
r3 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3)
r4 = add_key(&(0x7f0000000480)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="d27747c9f91f9bc5e1ff0e1f75fce873566e4f683a0d7b70cca4f4a3eab1e652958aa3275013215e706d56dff2d4b1f89d29a49a5e7d88ed0010ff45eab4cf53318fc7a6d5eabea2baed332344fd0d3d28b3410d350ed0e32caaf9165af0afefbb75e99624575541b684ea8315f15a69c825db3a4c8dacd60868e598011c3b3202940b2357c086bad2f4cbd5a81b1ff782fe0ade3e067db1a71f9a887dee4ce1b3ceb9c3193fe5ccaaddcdc1cd35", 0xae, r3)
request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='/\x00', r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='logon\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r2})
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r5 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r5)
r6 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r6, r3, r1, 0x0)
add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r5)
mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000140)=0xfcf, 0x0, 0x4)

12:44:27 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x8cffffff, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:27 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000040000001100000008000e"], 0x1c}}, 0x0)

12:44:27 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 25)

12:44:27 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x20790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:27 executing program 4:
r0 = semget(0x0, 0x0, 0x40)
semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x1)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1775.951142] FAULT_INJECTION: forcing a failure.
[ 1775.951142] name failslab, interval 1, probability 0, space 0, times 0
[ 1775.952288] CPU: 0 UID: 0 PID: 13174 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1775.952307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1775.952316] Call Trace:
[ 1775.952322]  <TASK>
[ 1775.952329]  dump_stack_lvl+0xfa/0x120
[ 1775.952360]  should_fail_ex+0x4d7/0x5e0
[ 1775.952393]  should_failslab+0xc2/0x120
[ 1775.952413]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1775.952437]  ? mark_held_locks+0x49/0x80
[ 1775.952455]  ? rfkill_fop_open+0x1ad/0x700
[ 1775.952486]  rfkill_fop_open+0x1ad/0x700
[ 1775.952515]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1775.952540]  misc_open+0x31e/0x420
[ 1775.952561]  ? __pfx_misc_open+0x10/0x10
[ 1775.952576]  chrdev_open+0x234/0x690
[ 1775.952596]  ? __pfx_chrdev_open+0x10/0x10
[ 1775.952612]  ? lock_release+0xc8/0x290
[ 1775.952645]  do_dentry_open+0x71c/0x1420
[ 1775.952664]  ? __pfx_chrdev_open+0x10/0x10
[ 1775.952693]  vfs_open+0x82/0x3f0
[ 1775.952710]  ? may_open+0x1f3/0x420
[ 1775.952738]  path_openat+0x1c3f/0x2880
[ 1775.952778]  ? __pfx_path_openat+0x10/0x10
[ 1775.952790]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1775.952831]  do_filp_open+0x1e8/0x450
[ 1775.952847]  ? __pfx_do_filp_open+0x10/0x10
[ 1775.952891]  ? find_held_lock+0x2b/0x80
[ 1775.952913]  ? alloc_fd+0x2c1/0x560
[ 1775.952935]  ? lock_release+0xc8/0x290
[ 1775.952964]  ? alloc_fd+0x2c1/0x560
[ 1775.953007]  do_sys_openat2+0x104/0x1b0
[ 1775.953027]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1775.953053]  ? __fget_files+0x20d/0x3b0
[ 1775.953090]  __x64_sys_openat+0x142/0x200
[ 1775.953111]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1775.953128]  ? ksys_write+0x1a3/0x240
[ 1775.953155]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1775.953181]  do_syscall_64+0xbf/0x360
[ 1775.953209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1775.953224] RIP: 0033:0x7f2a74959b19
[ 1775.953236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1775.953249] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1775.953263] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1775.953273] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1775.953281] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1775.953290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1775.953298] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1775.953340]  </TASK>
12:44:28 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 26)

12:44:28 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
mbind(&(0x7f0000846000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0x1, 0xff, 0x4)
mbind(&(0x7f00007de000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000040)=0xfffffffffffffd09, 0xffffffffffffffe1, 0x5)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:44:28 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xc0ed0000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:28 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 31)

[ 1776.103030] FAULT_INJECTION: forcing a failure.
[ 1776.103030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1776.104286] CPU: 0 UID: 0 PID: 13184 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1776.104304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1776.104311] Call Trace:
[ 1776.104317]  <TASK>
[ 1776.104323]  dump_stack_lvl+0xfa/0x120
[ 1776.104351]  should_fail_ex+0x4d7/0x5e0
[ 1776.104380]  strncpy_from_user+0x3b/0x2f0
[ 1776.104406]  getname_flags.part.0+0x8d/0x540
[ 1776.104432]  getname_flags+0x95/0xe0
[ 1776.104456]  do_sys_openat2+0x9f/0x1b0
[ 1776.104475]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1776.104516]  __x64_sys_openat+0x142/0x200
[ 1776.104534]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1776.104577]  do_syscall_64+0xbf/0x360
[ 1776.104601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1776.104615] RIP: 0033:0x7f48be4afa04
[ 1776.104626] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1776.104638] RSP: 002b:00007f48bba71ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1776.104651] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afa04
[ 1776.104659] RDX: 0000000000000002 RSI: 00007f48bba72000 RDI: 00000000ffffff9c
[ 1776.104667] RBP: 00007f48bba72000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1776.104675] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1776.104682] R13: 0000000000000005 R14: 0000000020002408 R15: 0000000000000003
[ 1776.104719]  </TASK>
12:44:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000090000001100000008000e"], 0x1c}}, 0x0)

12:44:28 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x21790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:28 executing program 4:
msgget$private(0x0, 0x640)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000540)={0x1, "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"}, 0x401, 0x0)
msgctl$IPC_RMID(r0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r3=>0x0)
r4 = getpgid(0xffffffffffffffff)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
fsetxattr$security_ima(r5, &(0x7f00000001c0), &(0x7f0000000200)=@v1={0x2, "036295ce"}, 0x5, 0x5)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r7=>0x0})
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, 0xee00, r2, r3, 0x0, 0x2}, 0x0, 0x0, 0x1f, 0x100, 0xe0a, 0x690, 0xf, 0xfff, 0x100, 0x6, r4, r7})
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000d17000/0x1000)=nil)

12:44:28 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000f0000001100000008000e"], 0x1c}}, 0x0)

12:44:28 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 27)

12:44:28 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 32)

12:44:28 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000d5a000/0x3000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(r0, &(0x7f0000481000/0x3000)=nil, 0x6000)

[ 1776.366197] FAULT_INJECTION: forcing a failure.
[ 1776.366197] name failslab, interval 1, probability 0, space 0, times 0
[ 1776.368191] CPU: 1 UID: 0 PID: 13209 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1776.368224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1776.368237] Call Trace:
[ 1776.368244]  <TASK>
[ 1776.368253]  dump_stack_lvl+0xfa/0x120
[ 1776.368293]  should_fail_ex+0x4d7/0x5e0
[ 1776.368333]  should_failslab+0xc2/0x120
[ 1776.368360]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1776.368393]  ? mark_held_locks+0x49/0x80
[ 1776.368418]  ? rfkill_fop_open+0x1ad/0x700
[ 1776.368455]  rfkill_fop_open+0x1ad/0x700
[ 1776.368490]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1776.368524]  misc_open+0x31e/0x420
[ 1776.368550]  ? __pfx_misc_open+0x10/0x10
[ 1776.368572]  chrdev_open+0x234/0x690
[ 1776.368598]  ? __pfx_chrdev_open+0x10/0x10
[ 1776.368621]  ? lock_release+0xc8/0x290
[ 1776.368656]  do_dentry_open+0x71c/0x1420
[ 1776.368681]  ? __pfx_chrdev_open+0x10/0x10
[ 1776.368713]  vfs_open+0x82/0x3f0
[ 1776.368739]  ? may_open+0x1f3/0x420
[ 1776.368773]  path_openat+0x1c3f/0x2880
[ 1776.368811]  ? __pfx_path_openat+0x10/0x10
[ 1776.368832]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1776.368877]  do_filp_open+0x1e8/0x450
[ 1776.368899]  ? __pfx_do_filp_open+0x10/0x10
[ 1776.368936]  ? find_held_lock+0x2b/0x80
[ 1776.368967]  ? alloc_fd+0x2c1/0x560
[ 1776.368999]  ? lock_release+0xc8/0x290
[ 1776.369031]  ? alloc_fd+0x2c1/0x560
[ 1776.369077]  do_sys_openat2+0x104/0x1b0
[ 1776.369106]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1776.369139]  ? __fget_files+0x20d/0x3b0
[ 1776.369182]  __x64_sys_openat+0x142/0x200
[ 1776.369212]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1776.369240]  ? ksys_write+0x1a3/0x240
[ 1776.369268]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1776.369298]  do_syscall_64+0xbf/0x360
[ 1776.369334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1776.369357] RIP: 0033:0x7f2a74959b19
[ 1776.369374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1776.369395] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1776.369416] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1776.369431] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1776.369444] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1776.369457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1776.369470] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1776.369507]  </TASK>
[ 1776.379252] FAULT_INJECTION: forcing a failure.
[ 1776.379252] name failslab, interval 1, probability 0, space 0, times 0
[ 1776.394002] CPU: 0 UID: 0 PID: 13211 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1776.394020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1776.394028] Call Trace:
[ 1776.394034]  <TASK>
[ 1776.394040]  dump_stack_lvl+0xfa/0x120
[ 1776.394069]  should_fail_ex+0x4d7/0x5e0
[ 1776.394098]  ? alloc_empty_file+0x58/0x1e0
[ 1776.394114]  should_failslab+0xc2/0x120
[ 1776.394131]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1776.394150]  ? __is_insn_slot_addr+0x140/0x290
[ 1776.394175]  ? kernel_text_address+0x5b/0xc0
[ 1776.394196]  alloc_empty_file+0x58/0x1e0
[ 1776.394216]  path_openat+0xe0/0x2880
[ 1776.394229]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1776.394249]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1776.394282]  ? __pfx_path_openat+0x10/0x10
[ 1776.394293]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1776.394326]  do_filp_open+0x1e8/0x450
[ 1776.394339]  ? __pfx_do_filp_open+0x10/0x10
[ 1776.394371]  ? find_held_lock+0x2b/0x80
[ 1776.394392]  ? alloc_fd+0x2c1/0x560
[ 1776.394412]  ? lock_release+0xc8/0x290
[ 1776.394434]  ? _raw_spin_unlock+0x1e/0x40
[ 1776.394449]  ? alloc_fd+0x2c1/0x560
[ 1776.394485]  do_sys_openat2+0x104/0x1b0
[ 1776.394503]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1776.394542]  __x64_sys_openat+0x142/0x200
[ 1776.394560]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1776.394599]  do_syscall_64+0xbf/0x360
[ 1776.394622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1776.394636] RIP: 0033:0x7f48be4afa04
[ 1776.394646] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1776.394658] RSP: 002b:00007f48bba71ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1776.394670] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afa04
[ 1776.394678] RDX: 0000000000000002 RSI: 00007f48bba72000 RDI: 00000000ffffff9c
[ 1776.394685] RBP: 00007f48bba72000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1776.394692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1776.394699] R13: 0000000000000005 R14: 0000000020002408 R15: 0000000000000003
[ 1776.394733]  </TASK>
12:44:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x22790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:36 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000646000/0x4000)=nil)

12:44:36 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xf6ffffff, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:36 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 33)

12:44:36 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x1c000000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000001c0000001100000008000e"], 0x1c}}, 0x0)

12:44:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 28)

12:44:36 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000d07000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:44:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x23790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:37 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xffff0000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:46 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xffffff8c, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 29)

12:44:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:46 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f000066d000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f000073b000/0x3000)=nil)

12:44:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 34)

12:44:46 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000bf5000/0x1000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:44:46 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x24790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300ffffff9e0000001100000008000e"], 0x1c}}, 0x0)

[ 1794.568580] FAULT_INJECTION: forcing a failure.
[ 1794.568580] name failslab, interval 1, probability 0, space 0, times 0
[ 1794.570019] CPU: 0 UID: 0 PID: 13247 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1794.570038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1794.570047] Call Trace:
[ 1794.570052]  <TASK>
[ 1794.570059]  dump_stack_lvl+0xfa/0x120
[ 1794.570093]  should_fail_ex+0x4d7/0x5e0
[ 1794.570127]  should_failslab+0xc2/0x120
[ 1794.570146]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1794.570172]  ? mark_held_locks+0x49/0x80
[ 1794.570189]  ? rfkill_fop_open+0x1ad/0x700
[ 1794.570221]  rfkill_fop_open+0x1ad/0x700
[ 1794.570250]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1794.570277]  misc_open+0x31e/0x420
[ 1794.570298]  ? __pfx_misc_open+0x10/0x10
[ 1794.570313]  chrdev_open+0x234/0x690
[ 1794.570333]  ? __pfx_chrdev_open+0x10/0x10
[ 1794.570350]  ? lock_release+0xc8/0x290
[ 1794.570383]  do_dentry_open+0x71c/0x1420
[ 1794.570403]  ? __pfx_chrdev_open+0x10/0x10
[ 1794.570433]  vfs_open+0x82/0x3f0
[ 1794.570451]  ? may_open+0x1f3/0x420
[ 1794.570480]  path_openat+0x1c3f/0x2880
[ 1794.570520]  ? __pfx_path_openat+0x10/0x10
[ 1794.570533]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1794.570575]  do_filp_open+0x1e8/0x450
[ 1794.570590]  ? __pfx_do_filp_open+0x10/0x10
[ 1794.570629]  ? find_held_lock+0x2b/0x80
[ 1794.570652]  ? alloc_fd+0x2c1/0x560
[ 1794.570676]  ? lock_release+0xc8/0x290
[ 1794.570705]  ? alloc_fd+0x2c1/0x560
[ 1794.570749]  do_sys_openat2+0x104/0x1b0
[ 1794.570769]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1794.570796]  ? __fget_files+0x20d/0x3b0
[ 1794.570834]  __x64_sys_openat+0x142/0x200
[ 1794.570861]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1794.570879]  ? ksys_write+0x1a3/0x240
[ 1794.570905]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1794.570932]  do_syscall_64+0xbf/0x360
[ 1794.570960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1794.570975] RIP: 0033:0x7f2a74959b19
[ 1794.570987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1794.571001] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1794.571014] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1794.571024] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1794.571032] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1794.571041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1794.571049] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1794.571091]  </TASK>
12:44:46 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f0000a68000/0x1000)=nil, 0x1000, 0xb)

[ 1794.654757] FAULT_INJECTION: forcing a failure.
[ 1794.654757] name failslab, interval 1, probability 0, space 0, times 0
[ 1794.656690] CPU: 1 UID: 0 PID: 13257 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1794.656721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1794.656734] Call Trace:
[ 1794.656741]  <TASK>
[ 1794.656750]  dump_stack_lvl+0xfa/0x120
[ 1794.656789]  should_fail_ex+0x4d7/0x5e0
[ 1794.656831]  ? security_file_alloc+0x35/0x130
[ 1794.656869]  should_failslab+0xc2/0x120
[ 1794.656900]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1794.656936]  ? __create_object+0x59/0x80
[ 1794.656975]  security_file_alloc+0x35/0x130
[ 1794.657008]  init_file+0x95/0x4c0
[ 1794.657038]  alloc_empty_file+0x76/0x1e0
[ 1794.657070]  path_openat+0xe0/0x2880
[ 1794.657096]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1794.657135]  ? __pfx_path_openat+0x10/0x10
[ 1794.657157]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1794.657195]  do_filp_open+0x1e8/0x450
[ 1794.657217]  ? __pfx_do_filp_open+0x10/0x10
[ 1794.657256]  ? find_held_lock+0x2b/0x80
[ 1794.657289]  ? alloc_fd+0x2c1/0x560
[ 1794.657322]  ? lock_release+0xc8/0x290
[ 1794.657353]  ? _raw_spin_unlock+0x1e/0x40
[ 1794.657381]  ? alloc_fd+0x2c1/0x560
[ 1794.657428]  do_sys_openat2+0x104/0x1b0
[ 1794.657458]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1794.657506]  __x64_sys_openat+0x142/0x200
[ 1794.657537]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1794.657586]  do_syscall_64+0xbf/0x360
[ 1794.657624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1794.657648] RIP: 0033:0x7f48be4afa04
[ 1794.657666] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1794.657688] RSP: 002b:00007f48bba71ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1794.657711] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afa04
[ 1794.657726] RDX: 0000000000000002 RSI: 00007f48bba72000 RDI: 00000000ffffff9c
[ 1794.657741] RBP: 00007f48bba72000 R08: 0000000000000000 R09: ffffffffffffffff
[ 1794.657755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1794.657768] R13: 0000000000000005 R14: 0000000020002408 R15: 0000000000000003
[ 1794.657804]  </TASK>
12:44:46 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x25790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 35)

12:44:46 executing program 3:
shmat(0x0, &(0x7f0000c75000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xe04, 0x20)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)

12:44:46 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ca3000/0x1000)=nil, 0x2000)
r0 = shmget(0x3, 0x1000, 0x8, &(0x7f0000e0b000/0x1000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/4096)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000062e000/0x1000)=nil)

12:44:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000bb0000001100000008000e"], 0x1c}}, 0x0)

12:44:46 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xfffffff6, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1797.538071] Bluetooth: hci7: command 0x0406 tx timeout
12:44:55 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 36)

12:44:55 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)

12:44:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000ec00000001100000008000e"], 0x1c}}, 0x0)

12:44:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 30)

12:44:55 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xda020000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:55 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x26790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:55 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xedc000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1803.694886] FAULT_INJECTION: forcing a failure.
[ 1803.694886] name failslab, interval 1, probability 0, space 0, times 0
[ 1803.696636] CPU: 0 UID: 0 PID: 13295 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1803.696666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1803.696679] Call Trace:
[ 1803.696688]  <TASK>
[ 1803.696698]  dump_stack_lvl+0xfa/0x120
[ 1803.696744]  should_fail_ex+0x4d7/0x5e0
[ 1803.696796]  should_failslab+0xc2/0x120
[ 1803.696825]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1803.696870]  ? mark_held_locks+0x49/0x80
[ 1803.696897]  ? rfkill_fop_open+0x1ad/0x700
[ 1803.696945]  rfkill_fop_open+0x1ad/0x700
[ 1803.696992]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1803.697032]  misc_open+0x31e/0x420
[ 1803.697065]  ? __pfx_misc_open+0x10/0x10
[ 1803.697089]  chrdev_open+0x234/0x690
[ 1803.697120]  ? __pfx_chrdev_open+0x10/0x10
[ 1803.697147]  ? lock_release+0xc8/0x290
[ 1803.697199]  do_dentry_open+0x71c/0x1420
[ 1803.697230]  ? __pfx_chrdev_open+0x10/0x10
[ 1803.697276]  vfs_open+0x82/0x3f0
[ 1803.697304]  ? may_open+0x1f3/0x420
[ 1803.697348]  path_openat+0x1c3f/0x2880
[ 1803.697413]  ? __pfx_path_openat+0x10/0x10
[ 1803.697432]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1803.697497]  do_filp_open+0x1e8/0x450
[ 1803.697521]  ? __pfx_do_filp_open+0x10/0x10
[ 1803.697583]  ? find_held_lock+0x2b/0x80
[ 1803.697618]  ? alloc_fd+0x2c1/0x560
[ 1803.697653]  ? lock_release+0xc8/0x290
[ 1803.697699]  ? alloc_fd+0x2c1/0x560
[ 1803.697768]  do_sys_openat2+0x104/0x1b0
[ 1803.697800]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1803.697842]  ? __fget_files+0x20d/0x3b0
[ 1803.697903]  __x64_sys_openat+0x142/0x200
[ 1803.697936]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1803.697964]  ? ksys_write+0x1a3/0x240
[ 1803.698005]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1803.698046]  do_syscall_64+0xbf/0x360
[ 1803.698089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1803.698112] RIP: 0033:0x7f2a74959b19
[ 1803.698131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1803.698152] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1803.698174] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1803.698189] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1803.698203] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1803.698216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1803.698229] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1803.698295]  </TASK>
[ 1803.730765] FAULT_INJECTION: forcing a failure.
[ 1803.730765] name failslab, interval 1, probability 0, space 0, times 0
[ 1803.732914] CPU: 1 UID: 0 PID: 13306 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1803.732932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1803.732940] Call Trace:
[ 1803.732945]  <TASK>
[ 1803.732950]  dump_stack_lvl+0xfa/0x120
[ 1803.732980]  should_fail_ex+0x4d7/0x5e0
[ 1803.733005]  should_failslab+0xc2/0x120
[ 1803.733022]  kmem_cache_alloc_lru_noprof+0x73/0x3c0
[ 1803.733044]  ? __d_alloc+0x31/0xa10
[ 1803.733062]  __d_alloc+0x31/0xa10
[ 1803.733079]  d_alloc_parallel+0x112/0x1330
[ 1803.733099]  ? lock_acquire+0x15e/0x2f0
[ 1803.733115]  ? __d_lookup+0x73/0x490
[ 1803.733131]  ? find_held_lock+0x2b/0x80
[ 1803.733149]  ? __d_lookup+0x255/0x490
[ 1803.733164]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 1803.733180]  ? lock_is_held_type+0x9e/0x120
[ 1803.733202]  ? __d_lookup+0x25f/0x490
[ 1803.733224]  lookup_open.isra.0+0x64f/0x1530
[ 1803.733250]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 1803.733281]  ? mnt_get_write_access+0x81/0x2d0
[ 1803.733296]  ? mnt_get_write_access+0x1ea/0x2d0
[ 1803.733316]  path_openat+0xc26/0x2880
[ 1803.733337]  ? __pfx_path_openat+0x10/0x10
[ 1803.733349]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1803.733371]  do_filp_open+0x1e8/0x450
[ 1803.733383]  ? __pfx_do_filp_open+0x10/0x10
[ 1803.733403]  ? find_held_lock+0x2b/0x80
[ 1803.733420]  ? alloc_fd+0x2c1/0x560
[ 1803.733439]  ? lock_release+0xc8/0x290
[ 1803.733459]  ? alloc_fd+0x2c1/0x560
[ 1803.733485]  do_sys_openat2+0x104/0x1b0
[ 1803.733503]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1803.733528]  __x64_sys_openat+0x142/0x200
[ 1803.733544]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1803.733563]  ? fput+0x6a/0x100
[ 1803.733578]  ? do_sys_ftruncate+0x81/0xb0
[ 1803.733594]  do_syscall_64+0xbf/0x360
[ 1803.733615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1803.733628] RIP: 0033:0x7f48be4afa04
[ 1803.733638] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 1803.733650] RSP: 002b:00007f48bba71ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1803.733662] RAX: ffffffffffffffda RBX: 00007f48be546970 RCX: 00007f48be4afa04
[ 1803.733670] RDX: 0000000000000002 RSI: 00007f48bba72000 RDI: 00000000ffffff9c
[ 1803.733677] RBP: 00007f48bba72000 R08: 0000000000000000 R09: ffffffffffffffff
12:44:55 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x27790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 31)

[ 1803.733685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1803.733691] R13: 0000000000000005 R14: 0000000020002408 R15: 0000000000000003
[ 1803.733711]  </TASK>
12:44:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300fffffff00000001100000008000e"], 0x1c}}, 0x0)

12:44:55 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x28790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 32)

12:44:55 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x8000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:55 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:44:55 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 37)

12:44:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 33)

12:44:56 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x29790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:56 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2a790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:44:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 34)

12:45:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 35)

12:45:06 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x100000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2b790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000f0ffff0000001100000008000e"], 0x1c}}, 0x0)

12:45:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 38)

12:45:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:06 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000f54000/0x2000)=nil, 0x1000)
r1 = shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000bf0000/0x7000)=nil, 0x5000)
mremap(&(0x7f0000d05000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
r2 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r2)
shmdt(r2)
shmdt(r1)

12:45:06 executing program 3:
mremap(&(0x7f0000565000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f0000565000/0x3000)=nil, 0x3000, 0x17)

12:45:06 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x200000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103007fffffff0000001100000008000e"], 0x1c}}, 0x0)

12:45:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 1814.672523] FAULT_INJECTION: forcing a failure.
[ 1814.672523] name failslab, interval 1, probability 0, space 0, times 0
[ 1814.673596] CPU: 0 UID: 0 PID: 13354 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1814.673614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1814.673622] Call Trace:
[ 1814.673627]  <TASK>
[ 1814.673633]  dump_stack_lvl+0xfa/0x120
[ 1814.673662]  should_fail_ex+0x4d7/0x5e0
[ 1814.673694]  should_failslab+0xc2/0x120
[ 1814.673712]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1814.673736]  ? mark_held_locks+0x49/0x80
[ 1814.673753]  ? rfkill_fop_open+0x1ad/0x700
[ 1814.673783]  rfkill_fop_open+0x1ad/0x700
[ 1814.673810]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1814.673834]  misc_open+0x31e/0x420
[ 1814.673859]  ? __pfx_misc_open+0x10/0x10
[ 1814.673873]  chrdev_open+0x234/0x690
[ 1814.673891]  ? __pfx_chrdev_open+0x10/0x10
[ 1814.673907]  ? lock_release+0xc8/0x290
[ 1814.673938]  do_dentry_open+0x71c/0x1420
[ 1814.673957]  ? __pfx_chrdev_open+0x10/0x10
[ 1814.673985]  vfs_open+0x82/0x3f0
[ 1814.674003]  ? may_open+0x1f3/0x420
[ 1814.674029]  path_openat+0x1c3f/0x2880
[ 1814.674068]  ? __pfx_path_openat+0x10/0x10
[ 1814.674079]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1814.674119]  do_filp_open+0x1e8/0x450
[ 1814.674133]  ? __pfx_do_filp_open+0x10/0x10
[ 1814.674170]  ? find_held_lock+0x2b/0x80
[ 1814.674191]  ? alloc_fd+0x2c1/0x560
[ 1814.674212]  ? lock_release+0xc8/0x290
[ 1814.674240]  ? alloc_fd+0x2c1/0x560
[ 1814.674281]  do_sys_openat2+0x104/0x1b0
[ 1814.674300]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1814.674324]  ? __fget_files+0x20d/0x3b0
[ 1814.674360]  __x64_sys_openat+0x142/0x200
[ 1814.674380]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1814.674397]  ? ksys_write+0x1a3/0x240
[ 1814.674422]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1814.674447]  do_syscall_64+0xbf/0x360
[ 1814.674473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1814.674488] RIP: 0033:0x7f2a74959b19
[ 1814.674499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1814.674512] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1814.674525] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1814.674534] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1814.674543] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1814.674551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1814.674558] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1814.674598]  </TASK>
12:45:06 executing program 3:
semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000000)=""/194)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(0x0, &(0x7f0000982000/0x2000)=nil, 0x5000)

12:45:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2c790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 36)

12:45:06 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x700000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2d790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:16 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0) (fail_nth: 37)

12:45:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103009effffff0000001100000008000e"], 0x1c}}, 0x0)

12:45:16 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000900000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
mremap(&(0x7f0000771000/0xe000)=nil, 0xe000, 0x1000, 0x7, &(0x7f0000f09000/0x1000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x20, &(0x7f0000ffb000/0x5000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000c28000/0x3000)=nil)
shmat(r1, &(0x7f0000645000/0x2000)=nil, 0x2000)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x47fc, 0x6, 0xd)
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r1, 0x0)
r2 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000a61000/0x3000)=nil)
shmctl$IPC_RMID(r2, 0x0)

12:45:16 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 39)

12:45:16 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x800000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:16 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x73)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

[ 1824.936439] FAULT_INJECTION: forcing a failure.
[ 1824.936439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1824.938648] CPU: 1 UID: 0 PID: 13394 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1824.938682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1824.938697] Call Trace:
[ 1824.938705]  <TASK>
[ 1824.938715]  dump_stack_lvl+0xfa/0x120
[ 1824.938759]  should_fail_ex+0x4d7/0x5e0
[ 1824.938804]  _copy_to_user+0x32/0xd0
[ 1824.938835]  simple_read_from_buffer+0xe0/0x180
[ 1824.938884]  proc_fail_nth_read+0x18a/0x240
[ 1824.938913]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1824.938941]  ? security_file_permission+0x22/0x90
[ 1824.938979]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1824.939006]  vfs_read+0x1eb/0xbe0
12:45:17 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x900000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1824.939038]  ? __pfx_vfs_read+0x10/0x10
[ 1824.939064]  ? lock_release+0xc8/0x290
[ 1824.939100]  ? __fget_files+0x20d/0x3b0
[ 1824.939154]  ksys_read+0x121/0x240
[ 1824.939177]  ? __pfx_ksys_read+0x10/0x10
[ 1824.939216]  do_syscall_64+0xbf/0x360
[ 1824.939257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1824.939283] RIP: 0033:0x7f48be4af69c
[ 1824.939302] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1824.939325] RSP: 002b:00007f48bba72170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
12:45:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300f0ffffff0000001100000008000e"], 0x1c}}, 0x0)

[ 1824.939349] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f48be4af69c
[ 1824.939365] RDX: 000000000000000f RSI: 00007f48bba721e0 RDI: 0000000000000004
[ 1824.939380] RBP: 00007f48bba721d0 R08: 0000000000000000 R09: ffffffffffffffff
[ 1824.939395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
12:45:17 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000cae000/0x1000)=nil)

[ 1824.939410] R13: 00007ffcdc67476f R14: 00007f48bba72300 R15: 0000000000022000
[ 1824.939452]  </TASK>
12:45:17 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
shmat(0x0, &(0x7f0000e56000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:45:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2e790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 40)

[ 1825.228926] FAULT_INJECTION: forcing a failure.
[ 1825.228926] name failslab, interval 1, probability 0, space 0, times 0
[ 1825.230772] CPU: 1 UID: 0 PID: 13415 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1825.230805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1825.230820] Call Trace:
[ 1825.230828]  <TASK>
[ 1825.230839]  dump_stack_lvl+0xfa/0x120
[ 1825.230891]  should_fail_ex+0x4d7/0x5e0
[ 1825.230937]  should_failslab+0xc2/0x120
[ 1825.230966]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1825.231007]  ? rfkill_fop_open+0x1ad/0x700
[ 1825.231049]  rfkill_fop_open+0x1ad/0x700
[ 1825.231089]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1825.231126]  misc_open+0x31e/0x420
[ 1825.231156]  ? __pfx_misc_open+0x10/0x10
[ 1825.231180]  chrdev_open+0x234/0x690
[ 1825.231209]  ? __pfx_chrdev_open+0x10/0x10
[ 1825.231236]  ? lock_release+0xc8/0x290
[ 1825.231276]  do_dentry_open+0x71c/0x1420
[ 1825.231304]  ? __pfx_chrdev_open+0x10/0x10
[ 1825.231341]  vfs_open+0x82/0x3f0
[ 1825.231369]  ? may_open+0x1f3/0x420
[ 1825.231407]  path_openat+0x1c3f/0x2880
[ 1825.231451]  ? __pfx_path_openat+0x10/0x10
[ 1825.231474]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1825.231517]  do_filp_open+0x1e8/0x450
[ 1825.231540]  ? __pfx_do_filp_open+0x10/0x10
[ 1825.231583]  ? find_held_lock+0x2b/0x80
[ 1825.231618]  ? alloc_fd+0x2c1/0x560
[ 1825.231654]  ? lock_release+0xc8/0x290
[ 1825.231689]  ? alloc_fd+0x2c1/0x560
[ 1825.231740]  do_sys_openat2+0x104/0x1b0
[ 1825.231772]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1825.231809]  ? __fget_files+0x20d/0x3b0
[ 1825.231857]  __x64_sys_openat+0x142/0x200
[ 1825.231890]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1825.231921]  ? ksys_write+0x1a3/0x240
[ 1825.231952]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1825.231985]  do_syscall_64+0xbf/0x360
[ 1825.232026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1825.232051] RIP: 0033:0x7f2a74959b19
[ 1825.232070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1825.232105] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1825.232129] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1825.232146] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1825.232161] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1825.232175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1825.232190] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1825.232231]  </TASK>
12:45:27 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:27 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000ffffff9900000008000e"], 0x1c}}, 0x0)

12:45:27 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xa00000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:27 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2f790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:27 executing program 3:
fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/223)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:45:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 41)

12:45:27 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x30790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:27 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:27 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/snmp6\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',\x00'])
mmap$usbmon(&(0x7f0000ee7000/0x1000)=nil, 0x1000, 0x800000, 0x10010, r1, 0x7)
r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x40, 0x81, 0x5, 0x0, 0x7, 0x218, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10348, 0x2000000000000000, 0x8, 0x2, 0x7ff, 0x1ff, 0xa09e, 0x0, 0x1, 0x0, 0x7c}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
finit_module(r1, &(0x7f0000000140)='rfdno', 0x2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0x5)
setuid(r8)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, <r10=>0x0}, &(0x7f0000000040)=0x5)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@uid_gt}, {@euid_lt={'euid<', r6}}, {@subj_type={'subj_type', 0x3d, 'rfdno'}}, {@uid_gt={'uid>', r8}}, {@fowner_lt={'fowner<', r8}}, {@hash}, {@smackfsfloor}, {@euid_eq={'euid', 0x3d, r10}}]}})
fcntl$notify(r4, 0x402, 0x1ac74074d12398fc)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe3, 0x1, 0x3, 0x20, 0x0, 0xe2d, 0x4108, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x7, @perf_config_ext={0x1}, 0x9028, 0x1, 0x7, 0x6, 0x8, 0x8, 0x3, 0x0, 0xb00, 0x0, 0x80000001}, 0xffffffffffffffff, 0xf, r3, 0x8)

12:45:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 42)

12:45:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000200000000001100000008000e"], 0x1c}}, 0x0)

12:45:27 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x31790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1835.570733] FAULT_INJECTION: forcing a failure.
[ 1835.570733] name failslab, interval 1, probability 0, space 0, times 0
[ 1835.571774] CPU: 1 UID: 0 PID: 13445 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1835.571790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1835.571798] Call Trace:
[ 1835.571802]  <TASK>
[ 1835.571807]  dump_stack_lvl+0xfa/0x120
[ 1835.571831]  should_fail_ex+0x4d7/0x5e0
[ 1835.571858]  should_failslab+0xc2/0x120
[ 1835.571873]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1835.571892]  ? mark_held_locks+0x49/0x80
[ 1835.571906]  ? rfkill_fop_open+0x1ad/0x700
[ 1835.571927]  rfkill_fop_open+0x1ad/0x700
[ 1835.571946]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1835.571964]  misc_open+0x31e/0x420
[ 1835.571979]  ? __pfx_misc_open+0x10/0x10
[ 1835.571991]  chrdev_open+0x234/0x690
[ 1835.572006]  ? __pfx_chrdev_open+0x10/0x10
[ 1835.572018]  ? lock_release+0xc8/0x290
[ 1835.572037]  do_dentry_open+0x71c/0x1420
[ 1835.572051]  ? __pfx_chrdev_open+0x10/0x10
[ 1835.572069]  vfs_open+0x82/0x3f0
[ 1835.572083]  ? may_open+0x1f3/0x420
[ 1835.572102]  path_openat+0x1c3f/0x2880
[ 1835.572122]  ? __pfx_path_openat+0x10/0x10
[ 1835.572134]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1835.572155]  do_filp_open+0x1e8/0x450
[ 1835.572166]  ? __pfx_do_filp_open+0x10/0x10
[ 1835.572187]  ? find_held_lock+0x2b/0x80
[ 1835.572203]  ? alloc_fd+0x2c1/0x560
[ 1835.572221]  ? lock_release+0xc8/0x290
[ 1835.572238]  ? alloc_fd+0x2c1/0x560
[ 1835.572278]  do_sys_openat2+0x104/0x1b0
[ 1835.572293]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1835.572311]  ? __fget_files+0x20d/0x3b0
[ 1835.572335]  __x64_sys_openat+0x142/0x200
[ 1835.572351]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1835.572366]  ? ksys_write+0x1a3/0x240
[ 1835.572381]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1835.572398]  do_syscall_64+0xbf/0x360
[ 1835.572419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1835.572431] RIP: 0033:0x7f2a74959b19
[ 1835.572441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1835.572452] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1835.572464] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1835.572473] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1835.572480] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1835.572487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1835.572494] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1835.572514]  </TASK>
12:45:27 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xb00000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:27 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xf, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:27 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f0000b98000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f00006ce000/0x1000)=nil, 0x1000, 0x65)

12:45:27 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x2, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 43)

12:45:38 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x1000000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:38 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x32790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000400000000001100000008000e"], 0x1c}}, 0x0)

12:45:38 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mmap(&(0x7f0000ec4000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x45c3b000)

12:45:38 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:38 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000ef0000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x4, 0x8, 0x4)

12:45:38 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x3, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:38 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 44)

[ 1846.505447] FAULT_INJECTION: forcing a failure.
[ 1846.505447] name failslab, interval 1, probability 0, space 0, times 0
[ 1846.507294] CPU: 1 UID: 0 PID: 13484 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1846.507327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1846.507341] Call Trace:
[ 1846.507349]  <TASK>
[ 1846.507359]  dump_stack_lvl+0xfa/0x120
[ 1846.507401]  should_fail_ex+0x4d7/0x5e0
[ 1846.507445]  should_failslab+0xc2/0x120
[ 1846.507473]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1846.507509]  ? mark_held_locks+0x49/0x80
[ 1846.507535]  ? rfkill_fop_open+0x1ad/0x700
[ 1846.507575]  rfkill_fop_open+0x1ad/0x700
[ 1846.507613]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1846.507650]  misc_open+0x31e/0x420
[ 1846.507678]  ? __pfx_misc_open+0x10/0x10
[ 1846.507702]  chrdev_open+0x234/0x690
[ 1846.507730]  ? __pfx_chrdev_open+0x10/0x10
[ 1846.507755]  ? lock_release+0xc8/0x290
[ 1846.507792]  do_dentry_open+0x71c/0x1420
[ 1846.507820]  ? __pfx_chrdev_open+0x10/0x10
[ 1846.507862]  vfs_open+0x82/0x3f0
[ 1846.507890]  ? may_open+0x1f3/0x420
[ 1846.507926]  path_openat+0x1c3f/0x2880
[ 1846.507968]  ? __pfx_path_openat+0x10/0x10
[ 1846.507991]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1846.508031]  do_filp_open+0x1e8/0x450
[ 1846.508054]  ? __pfx_do_filp_open+0x10/0x10
[ 1846.508095]  ? find_held_lock+0x2b/0x80
[ 1846.508127]  ? alloc_fd+0x2c1/0x560
[ 1846.508162]  ? lock_release+0xc8/0x290
[ 1846.508197]  ? alloc_fd+0x2c1/0x560
[ 1846.508246]  do_sys_openat2+0x104/0x1b0
[ 1846.508276]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1846.508312]  ? __fget_files+0x20d/0x3b0
[ 1846.508358]  __x64_sys_openat+0x142/0x200
[ 1846.508390]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1846.508420]  ? ksys_write+0x1a3/0x240
[ 1846.508471]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1846.508503]  do_syscall_64+0xbf/0x360
[ 1846.508542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1846.508566] RIP: 0033:0x7f2a74959b19
[ 1846.508584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1846.508607] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1846.508629] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1846.508645] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1846.508660] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1846.508674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1846.508688] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1846.508728]  </TASK>
12:45:38 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x2000000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000800000000001100000008000e"], 0x1c}}, 0x0)

12:45:38 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000769000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x3, 0x0, 0x4)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x7, 0x81, 0x1)

12:45:38 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x180, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:38 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x4, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:38 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 45)

12:45:38 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x33790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000900000000001100000008000e"], 0x1c}}, 0x0)

12:45:48 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 46)

12:45:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x5, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:48 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x2010000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:48 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x34790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:48 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x33fe0, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:48 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000e9f000/0x4000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:45:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000f00000000001100000008000e"], 0x1c}}, 0x0)

12:45:48 executing program 3:
shmat(0xffffffffffffffff, &(0x7f0000400000/0xc00000)=nil, 0x1000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000f5a000/0x2000)=nil, 0x2000, 0x0, r0)

12:45:48 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x8cffffff00000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1856.446249] FAULT_INJECTION: forcing a failure.
[ 1856.446249] name failslab, interval 1, probability 0, space 0, times 0
[ 1856.447612] CPU: 0 UID: 0 PID: 13524 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1856.447629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1856.447637] Call Trace:
[ 1856.447642]  <TASK>
[ 1856.447648]  dump_stack_lvl+0xfa/0x120
[ 1856.447678]  should_fail_ex+0x4d7/0x5e0
[ 1856.447708]  should_failslab+0xc2/0x120
[ 1856.447725]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1856.447747]  ? mark_held_locks+0x49/0x80
[ 1856.447762]  ? rfkill_fop_open+0x1ad/0x700
[ 1856.447789]  rfkill_fop_open+0x1ad/0x700
[ 1856.447813]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1856.447836]  misc_open+0x31e/0x420
[ 1856.447859]  ? __pfx_misc_open+0x10/0x10
[ 1856.447872]  chrdev_open+0x234/0x690
[ 1856.447894]  ? __pfx_chrdev_open+0x10/0x10
[ 1856.447909]  ? lock_release+0xc8/0x290
[ 1856.447937]  do_dentry_open+0x71c/0x1420
[ 1856.447955]  ? __pfx_chrdev_open+0x10/0x10
[ 1856.447981]  vfs_open+0x82/0x3f0
[ 1856.447996]  ? may_open+0x1f3/0x420
[ 1856.448020]  path_openat+0x1c3f/0x2880
[ 1856.448056]  ? __pfx_path_openat+0x10/0x10
[ 1856.448066]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1856.448102]  do_filp_open+0x1e8/0x450
[ 1856.448116]  ? __pfx_do_filp_open+0x10/0x10
[ 1856.448150]  ? find_held_lock+0x2b/0x80
[ 1856.448169]  ? alloc_fd+0x2c1/0x560
[ 1856.448189]  ? lock_release+0xc8/0x290
[ 1856.448213]  ? alloc_fd+0x2c1/0x560
[ 1856.448252]  do_sys_openat2+0x104/0x1b0
[ 1856.448269]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1856.448291]  ? __fget_files+0x20d/0x3b0
[ 1856.448325]  __x64_sys_openat+0x142/0x200
[ 1856.448343]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1856.448358]  ? ksys_write+0x1a3/0x240
[ 1856.448381]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1856.448404]  do_syscall_64+0xbf/0x360
[ 1856.448427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1856.448441] RIP: 0033:0x7f2a74959b19
[ 1856.448451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1856.448462] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1856.448474] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1856.448482] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1856.448490] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1856.448497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1856.448504] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1856.448541]  </TASK>
12:45:48 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0xfffffdef, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x6, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:48 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000a4f000/0x12000)=nil, 0x12000, 0x8000, &(0x7f0000000000)=0x52855fd9, 0x80000000, 0x4)

12:45:48 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:48 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x35790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:48 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 47)

12:45:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300001c00000000001100000008000e"], 0x1c}}, 0x0)

12:45:48 executing program 3:
r0 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000efc000/0x4000)=nil)
sigaltstack(&(0x7f0000ab0000/0x3000)=nil, &(0x7f0000000000))

12:45:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x7, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(0xffffffffffffffff, &(0x7f00006b8000/0x3000)=nil, 0x2000)

12:45:58 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x36790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x302, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:58 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0xffff000000000000, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000bb00000000001100000008000e"], 0x1c}}, 0x0)

12:45:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 48)

12:45:58 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f000083e000/0x4000)=nil, 0x4000, 0x2000000, r0)
shmget$private(0x0, 0x3000, 0x10, &(0x7f0000d8a000/0x3000)=nil)

[ 1866.477637] FAULT_INJECTION: forcing a failure.
[ 1866.477637] name failslab, interval 1, probability 0, space 0, times 0
[ 1866.479363] CPU: 0 UID: 0 PID: 13568 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1866.479393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1866.479406] Call Trace:
[ 1866.479416]  <TASK>
[ 1866.479426]  dump_stack_lvl+0xfa/0x120
[ 1866.479475]  should_fail_ex+0x4d7/0x5e0
[ 1866.479528]  should_failslab+0xc2/0x120
[ 1866.479558]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1866.479597]  ? mark_held_locks+0x49/0x80
[ 1866.479623]  ? rfkill_fop_open+0x1ad/0x700
[ 1866.479672]  rfkill_fop_open+0x1ad/0x700
[ 1866.479718]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1866.479759]  misc_open+0x31e/0x420
[ 1866.479792]  ? __pfx_misc_open+0x10/0x10
[ 1866.479816]  chrdev_open+0x234/0x690
[ 1866.479846]  ? __pfx_chrdev_open+0x10/0x10
[ 1866.479880]  ? lock_release+0xc8/0x290
[ 1866.479932]  do_dentry_open+0x71c/0x1420
[ 1866.479964]  ? __pfx_chrdev_open+0x10/0x10
[ 1866.480010]  vfs_open+0x82/0x3f0
[ 1866.480039]  ? may_open+0x1f3/0x420
[ 1866.480083]  path_openat+0x1c3f/0x2880
[ 1866.480147]  ? __pfx_path_openat+0x10/0x10
[ 1866.480166]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1866.480230]  do_filp_open+0x1e8/0x450
[ 1866.480255]  ? __pfx_do_filp_open+0x10/0x10
[ 1866.480316]  ? find_held_lock+0x2b/0x80
[ 1866.480350]  ? alloc_fd+0x2c1/0x560
[ 1866.480385]  ? lock_release+0xc8/0x290
[ 1866.480431]  ? alloc_fd+0x2c1/0x560
[ 1866.480500]  do_sys_openat2+0x104/0x1b0
[ 1866.480531]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1866.480573]  ? __fget_files+0x20d/0x3b0
[ 1866.480634]  __x64_sys_openat+0x142/0x200
[ 1866.480667]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1866.480695]  ? ksys_write+0x1a3/0x240
[ 1866.480747]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1866.480788]  do_syscall_64+0xbf/0x360
[ 1866.480831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1866.480854] RIP: 0033:0x7f2a74959b19
[ 1866.480873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1866.480894] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1866.480915] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1866.480930] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1866.480944] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1866.480957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1866.480970] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1866.481035]  </TASK>
12:45:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x8, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:45:58 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x37790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:58 executing program 4:
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget(0x1, 0x1000, 0x40, &(0x7f0000b7d000/0x1000)=nil)
shmat(r0, &(0x7f0000815000/0x4000)=nil, 0x3000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:45:58 executing program 3:
timer_delete(0x0)
timer_create(0x5, &(0x7f00000001c0)={0x0, 0xf, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000200)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000240))
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
timer_create(0x3, &(0x7f0000000140)={0x0, 0x28, 0x1, @thr={&(0x7f0000000000)="ea5997f55ba6b30599d6e6c4d5fd08eecc9c2f71b487d7608f7c44d576ddc66a6908d587f60256e841e0b4f7", &(0x7f0000000040)="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"}}, &(0x7f0000000180)=<r1=>0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000563000/0x3000)=nil)
shmat(0x0, &(0x7f000085c000/0x4000)=nil, 0x1000)
timer_delete(r1)
timer_delete(0x0)
timer_delete(r1)

12:45:58 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x2, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:45:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 49)

12:45:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000f000000000001100000008000e"], 0x1c}}, 0x0)

12:45:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x311, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:58 executing program 4:
shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000564000/0x3000)=nil, 0x1000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:45:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f000084b000/0x11000)=nil, 0x11000, 0x1, &(0x7f0000000000)=0x2, 0xa337, 0x1)

12:45:59 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x374, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:45:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xc, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000009000000001100000008000e"], 0x1c}}, 0x0)

12:46:10 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x7, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x38790000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:10 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:10 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 50)

12:46:10 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget(0x0, 0x4000, 0x4, &(0x7f0000b25000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000))
shmctl$IPC_RMID(r0, 0x0)
mremap(&(0x7f0000c74000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f00006f1000/0x2000)=nil)

12:46:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x18, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:10 executing program 4:
r0 = shmget(0x1, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000561000/0x4000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)

[ 1878.315245] FAULT_INJECTION: forcing a failure.
[ 1878.315245] name failslab, interval 1, probability 0, space 0, times 0
[ 1878.316217] CPU: 0 UID: 0 PID: 13617 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1878.316233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1878.316241] Call Trace:
[ 1878.316246]  <TASK>
[ 1878.316252]  dump_stack_lvl+0xfa/0x120
[ 1878.316278]  should_fail_ex+0x4d7/0x5e0
[ 1878.316307]  should_failslab+0xc2/0x120
[ 1878.316324]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1878.316346]  ? mark_held_locks+0x49/0x80
[ 1878.316360]  ? rfkill_fop_open+0x1ad/0x700
[ 1878.316387]  rfkill_fop_open+0x1ad/0x700
[ 1878.316411]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1878.316433]  misc_open+0x31e/0x420
[ 1878.316452]  ? __pfx_misc_open+0x10/0x10
[ 1878.316465]  chrdev_open+0x234/0x690
[ 1878.316482]  ? __pfx_chrdev_open+0x10/0x10
[ 1878.316497]  ? lock_release+0xc8/0x290
[ 1878.316524]  do_dentry_open+0x71c/0x1420
[ 1878.316542]  ? __pfx_chrdev_open+0x10/0x10
[ 1878.316567]  vfs_open+0x82/0x3f0
[ 1878.316582]  ? may_open+0x1f3/0x420
[ 1878.316606]  path_openat+0x1c3f/0x2880
[ 1878.316641]  ? __pfx_path_openat+0x10/0x10
[ 1878.316651]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1878.316687]  do_filp_open+0x1e8/0x450
[ 1878.316700]  ? __pfx_do_filp_open+0x10/0x10
[ 1878.316733]  ? find_held_lock+0x2b/0x80
[ 1878.316752]  ? alloc_fd+0x2c1/0x560
[ 1878.316771]  ? lock_release+0xc8/0x290
[ 1878.316797]  ? alloc_fd+0x2c1/0x560
[ 1878.316834]  do_sys_openat2+0x104/0x1b0
[ 1878.316855]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1878.316878]  ? __fget_files+0x20d/0x3b0
[ 1878.316922]  __x64_sys_openat+0x142/0x200
[ 1878.316940]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1878.316955]  ? ksys_write+0x1a3/0x240
[ 1878.316978]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1878.317001]  do_syscall_64+0xbf/0x360
[ 1878.317025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.317038] RIP: 0033:0x7f2a74959b19
[ 1878.317048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1878.317060] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1878.317072] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1878.317080] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1878.317087] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1878.317095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1878.317102] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1878.317138]  </TASK>
12:46:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x1c, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:10 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 51)

12:46:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000c00e000000001100000008000e"], 0x1c}}, 0x0)

12:46:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x6b, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x2, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:22 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:46:22 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:22 executing program 4:
shmdt(0x0)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000922000/0x3000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:46:22 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 52)

12:46:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000f000000001100000008000e"], 0x1c}}, 0x0)

12:46:22 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:22 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xb7, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

[ 1890.855661] FAULT_INJECTION: forcing a failure.
[ 1890.855661] name failslab, interval 1, probability 0, space 0, times 0
[ 1890.857510] CPU: 0 UID: 0 PID: 13650 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1890.857535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1890.857545] Call Trace:
[ 1890.857552]  <TASK>
[ 1890.857560]  dump_stack_lvl+0xfa/0x120
[ 1890.857597]  should_fail_ex+0x4d7/0x5e0
[ 1890.857637]  should_failslab+0xc2/0x120
[ 1890.857661]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1890.857691]  ? mark_held_locks+0x49/0x80
[ 1890.857712]  ? rfkill_fop_open+0x1ad/0x700
[ 1890.857750]  rfkill_fop_open+0x1ad/0x700
[ 1890.857785]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1890.857817]  misc_open+0x31e/0x420
[ 1890.857843]  ? __pfx_misc_open+0x10/0x10
[ 1890.857867]  chrdev_open+0x234/0x690
[ 1890.857892]  ? __pfx_chrdev_open+0x10/0x10
[ 1890.857913]  ? lock_release+0xc8/0x290
[ 1890.857952]  do_dentry_open+0x71c/0x1420
[ 1890.857978]  ? __pfx_chrdev_open+0x10/0x10
[ 1890.858014]  vfs_open+0x82/0x3f0
[ 1890.858035]  ? may_open+0x1f3/0x420
[ 1890.858070]  path_openat+0x1c3f/0x2880
[ 1890.858119]  ? __pfx_path_openat+0x10/0x10
[ 1890.858134]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1890.858185]  do_filp_open+0x1e8/0x450
[ 1890.858204]  ? __pfx_do_filp_open+0x10/0x10
[ 1890.858251]  ? find_held_lock+0x2b/0x80
[ 1890.858278]  ? alloc_fd+0x2c1/0x560
[ 1890.858306]  ? lock_release+0xc8/0x290
[ 1890.858341]  ? alloc_fd+0x2c1/0x560
[ 1890.858394]  do_sys_openat2+0x104/0x1b0
[ 1890.858419]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1890.858451]  ? __fget_files+0x20d/0x3b0
[ 1890.858497]  __x64_sys_openat+0x142/0x200
[ 1890.858523]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1890.858544]  ? ksys_write+0x1a3/0x240
[ 1890.858576]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1890.858608]  do_syscall_64+0xbf/0x360
[ 1890.858642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1890.858660] RIP: 0033:0x7f2a74959b19
[ 1890.858676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1890.858692] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1890.858708] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1890.858720] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1890.858731] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1890.858741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1890.858751] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1890.858802]  </TASK>
12:46:23 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:23 executing program 3:
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mlock(&(0x7f0000b8f000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)

12:46:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xf5, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:23 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000468000/0x1000)=nil)

12:46:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x4, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000001c000000001100000008000e"], 0x1c}}, 0x0)

12:46:23 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 53)

12:46:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000bb000000001100000008000e"], 0x1c}}, 0x0)

12:46:33 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x9, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:33 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0xffffffffffffffff, &(0x7f0000cfc000/0x4000)=nil, 0x4000)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r1, 0x0)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r2 = fsmount(0xffffffffffffffff, 0xe274a1216454f5e7, 0x4)
mmap(&(0x7f0000918000/0x3000)=nil, 0x3000, 0x0, 0x10010, r2, 0x40ace000)

12:46:33 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 54)

12:46:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfe, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x8, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:33 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x58030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:33 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(0x0, &(0x7f0000c0d000/0x1000)=nil, 0x4000)

[ 1901.080377] FAULT_INJECTION: forcing a failure.
[ 1901.080377] name failslab, interval 1, probability 0, space 0, times 0
[ 1901.082489] CPU: 0 UID: 0 PID: 13700 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1901.082520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1901.082533] Call Trace:
[ 1901.082541]  <TASK>
[ 1901.082552]  dump_stack_lvl+0xfa/0x120
[ 1901.082597]  should_fail_ex+0x4d7/0x5e0
[ 1901.082649]  should_failslab+0xc2/0x120
[ 1901.082678]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1901.082717]  ? mark_held_locks+0x49/0x80
[ 1901.082744]  ? rfkill_fop_open+0x1ad/0x700
[ 1901.082792]  rfkill_fop_open+0x1ad/0x700
[ 1901.082838]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1901.082887]  misc_open+0x31e/0x420
[ 1901.082920]  ? __pfx_misc_open+0x10/0x10
[ 1901.082946]  chrdev_open+0x234/0x690
[ 1901.082979]  ? __pfx_chrdev_open+0x10/0x10
[ 1901.083006]  ? lock_release+0xc8/0x290
[ 1901.083057]  do_dentry_open+0x71c/0x1420
[ 1901.083089]  ? __pfx_chrdev_open+0x10/0x10
[ 1901.083135]  vfs_open+0x82/0x3f0
[ 1901.083163]  ? may_open+0x1f3/0x420
[ 1901.083206]  path_openat+0x1c3f/0x2880
[ 1901.083270]  ? __pfx_path_openat+0x10/0x10
[ 1901.083289]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1901.083354]  do_filp_open+0x1e8/0x450
[ 1901.083379]  ? __pfx_do_filp_open+0x10/0x10
[ 1901.083440]  ? find_held_lock+0x2b/0x80
[ 1901.083474]  ? alloc_fd+0x2c1/0x560
[ 1901.083509]  ? lock_release+0xc8/0x290
[ 1901.083556]  ? alloc_fd+0x2c1/0x560
[ 1901.083624]  do_sys_openat2+0x104/0x1b0
[ 1901.083656]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1901.083698]  ? __fget_files+0x20d/0x3b0
[ 1901.083758]  __x64_sys_openat+0x142/0x200
[ 1901.083791]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1901.083819]  ? ksys_write+0x1a3/0x240
[ 1901.083859]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1901.083901]  do_syscall_64+0xbf/0x360
[ 1901.083944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1901.083968] RIP: 0033:0x7f2a74959b19
[ 1901.083986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1901.084008] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1901.084029] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1901.084044] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1901.084058] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1901.084072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1901.084085] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1901.084151]  </TASK>
12:46:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x300, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:33 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:46:33 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x84c00000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:33 executing program 3:
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f00007d9000/0x1000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f00008ab000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r2 = shmat(r1, &(0x7f0000e57000/0x2000)=nil, 0x2000)
shmdt(r2)
shmdt(r2)

12:46:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000ec0000000001100000008000e"], 0x1c}}, 0x0)

12:46:33 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 55)

12:46:33 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x101)
shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x2000)

12:46:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x3ef, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:43 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:43 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xa, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:43 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x480, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:43 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 56)

12:46:43 executing program 4:
shmat(0x0, &(0x7f0000495000/0x1000)=nil, 0xa000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:46:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000f0000000001100000008000e"], 0x1c}}, 0x0)

12:46:43 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000563000/0x3000)=nil)

[ 1911.743037] FAULT_INJECTION: forcing a failure.
[ 1911.743037] name failslab, interval 1, probability 0, space 0, times 0
[ 1911.744022] CPU: 0 UID: 0 PID: 13740 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1911.744039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1911.744046] Call Trace:
[ 1911.744052]  <TASK>
[ 1911.744057]  dump_stack_lvl+0xfa/0x120
[ 1911.744085]  should_fail_ex+0x4d7/0x5e0
[ 1911.744115]  should_failslab+0xc2/0x120
[ 1911.744132]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1911.744153]  ? mark_held_locks+0x49/0x80
[ 1911.744168]  ? rfkill_fop_open+0x1ad/0x700
[ 1911.744196]  rfkill_fop_open+0x1ad/0x700
[ 1911.744220]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1911.744242]  misc_open+0x31e/0x420
[ 1911.744261]  ? __pfx_misc_open+0x10/0x10
[ 1911.744274]  chrdev_open+0x234/0x690
[ 1911.744291]  ? __pfx_chrdev_open+0x10/0x10
[ 1911.744306]  ? lock_release+0xc8/0x290
[ 1911.744333]  do_dentry_open+0x71c/0x1420
[ 1911.744351]  ? __pfx_chrdev_open+0x10/0x10
[ 1911.744376]  vfs_open+0x82/0x3f0
[ 1911.744391]  ? may_open+0x1f3/0x420
[ 1911.744416]  path_openat+0x1c3f/0x2880
[ 1911.744451]  ? __pfx_path_openat+0x10/0x10
[ 1911.744462]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1911.744497]  do_filp_open+0x1e8/0x450
[ 1911.744510]  ? __pfx_do_filp_open+0x10/0x10
[ 1911.744544]  ? find_held_lock+0x2b/0x80
[ 1911.744563]  ? alloc_fd+0x2c1/0x560
[ 1911.744582]  ? lock_release+0xc8/0x290
[ 1911.744607]  ? alloc_fd+0x2c1/0x560
[ 1911.744644]  do_sys_openat2+0x104/0x1b0
[ 1911.744661]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1911.744684]  ? __fget_files+0x20d/0x3b0
[ 1911.744717]  __x64_sys_openat+0x142/0x200
[ 1911.744735]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1911.744750]  ? ksys_write+0x1a3/0x240
[ 1911.744772]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1911.744795]  do_syscall_64+0xbf/0x360
[ 1911.744819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1911.744832] RIP: 0033:0x7f2a74959b19
[ 1911.744842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1911.744858] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1911.744869] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1911.744878] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1911.744885] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1911.744892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1911.744899] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1911.744935]  </TASK>
12:46:43 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x500, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:43 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 57)

12:46:43 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000563000/0x3000)=nil)

12:46:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x1c, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:44 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000080000001100000008000e"], 0x1c}}, 0x0)

12:46:44 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x97ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x600, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:44 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:54 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 58)

12:46:54 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xb, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:54 executing program 4:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a8, r0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a8}}, 0x40c0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r2=>0x0})
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4093b78be6cc152)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:46:54 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in, @in6=@dev}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8)
shmat(0x0, &(0x7f0000bb4000/0x4000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000bb6000/0x1000)=nil, 0xa000)
r4 = mq_open(&(0x7f0000000140)='rfdno', 0x40, 0x0, &(0x7f0000000180)={0x2, 0x4, 0x1c8, 0xffff})
sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0)=0x8, 0x1)
r5 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000bb3000/0x1000)=nil)
shmctl$IPC_RMID(r5, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:46:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x700, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000fffff00000001100000008000e"], 0x1c}}, 0x0)

12:46:54 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xa0cd9dd1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:46:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x2da, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000100001100000008000e"], 0x1c}}, 0x0)

[ 1922.529635] FAULT_INJECTION: forcing a failure.
[ 1922.529635] name failslab, interval 1, probability 0, space 0, times 0
[ 1922.531672] CPU: 0 UID: 0 PID: 13790 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1922.531702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1922.531716] Call Trace:
[ 1922.531725]  <TASK>
[ 1922.531734]  dump_stack_lvl+0xfa/0x120
[ 1922.531780]  should_fail_ex+0x4d7/0x5e0
[ 1922.531831]  should_failslab+0xc2/0x120
[ 1922.531868]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1922.531907]  ? mark_held_locks+0x49/0x80
[ 1922.531934]  ? rfkill_fop_open+0x1ad/0x700
[ 1922.531982]  rfkill_fop_open+0x1ad/0x700
[ 1922.532027]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1922.532068]  misc_open+0x31e/0x420
[ 1922.532101]  ? __pfx_misc_open+0x10/0x10
[ 1922.532125]  chrdev_open+0x234/0x690
[ 1922.532156]  ? __pfx_chrdev_open+0x10/0x10
[ 1922.532183]  ? lock_release+0xc8/0x290
[ 1922.532234]  do_dentry_open+0x71c/0x1420
[ 1922.532265]  ? __pfx_chrdev_open+0x10/0x10
[ 1922.532311]  vfs_open+0x82/0x3f0
[ 1922.532339]  ? may_open+0x1f3/0x420
[ 1922.532383]  path_openat+0x1c3f/0x2880
[ 1922.532447]  ? __pfx_path_openat+0x10/0x10
[ 1922.532466]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1922.532531]  do_filp_open+0x1e8/0x450
[ 1922.532555]  ? __pfx_do_filp_open+0x10/0x10
[ 1922.532617]  ? find_held_lock+0x2b/0x80
[ 1922.532652]  ? alloc_fd+0x2c1/0x560
[ 1922.532687]  ? lock_release+0xc8/0x290
[ 1922.532733]  ? alloc_fd+0x2c1/0x560
[ 1922.532801]  do_sys_openat2+0x104/0x1b0
[ 1922.532833]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1922.532875]  ? __fget_files+0x20d/0x3b0
[ 1922.532935]  __x64_sys_openat+0x142/0x200
[ 1922.532968]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1922.532996]  ? ksys_write+0x1a3/0x240
[ 1922.533059]  do_syscall_64+0xbf/0x360
[ 1922.533102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1922.533125] RIP: 0033:0x7f2a74959b19
[ 1922.533143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1922.533165] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1922.533186] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1922.533201] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1922.533215] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1922.533228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1922.533241] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1922.533307]  </TASK>
12:46:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x900, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:46:54 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000340)={0xc0000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:46:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xc00, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:46:54 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:05 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x10, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:05 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x9, &(0x7f0000f5e000/0x4000)=nil, 0x2)

12:47:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x1800, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000200001100000008000e"], 0x1c}}, 0x0)

12:47:05 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 59)

12:47:05 executing program 3:
shmat(0x0, &(0x7f00009af000/0x2000)=nil, 0x6000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000565000/0x1000)=nil, 0x7000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:05 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xd19dcda0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:05 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xec0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000400001100000008000e"], 0x1c}}, 0x0)

12:47:05 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f00004bc000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil)

12:47:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x1c00, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:05 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:05 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf00, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:05 executing program 4:
shmat(0xffffffffffffffff, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mlock(&(0x7f00009a1000/0x3000)=nil, 0x3000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
mbind(&(0x7f000069f000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0xfffffffffffff37b, 0x80000000, 0x9)

12:47:05 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 60)

12:47:05 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000bc1000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x3, 0x7fff, 0x1)

[ 1933.620756] FAULT_INJECTION: forcing a failure.
[ 1933.620756] name failslab, interval 1, probability 0, space 0, times 0
[ 1933.621795] CPU: 1 UID: 0 PID: 13859 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1933.621812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1933.621820] Call Trace:
[ 1933.621824]  <TASK>
[ 1933.621829]  dump_stack_lvl+0xfa/0x120
[ 1933.621867]  should_fail_ex+0x4d7/0x5e0
[ 1933.621892]  should_failslab+0xc2/0x120
[ 1933.621914]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1933.621946]  ? mark_held_locks+0x49/0x80
[ 1933.621969]  ? rfkill_fop_open+0x1ad/0x700
[ 1933.621996]  rfkill_fop_open+0x1ad/0x700
[ 1933.622020]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1933.622044]  misc_open+0x31e/0x420
[ 1933.622061]  ? __pfx_misc_open+0x10/0x10
[ 1933.622075]  chrdev_open+0x234/0x690
[ 1933.622095]  ? __pfx_chrdev_open+0x10/0x10
[ 1933.622111]  ? lock_release+0xc8/0x290
[ 1933.622138]  do_dentry_open+0x71c/0x1420
[ 1933.622162]  ? __pfx_chrdev_open+0x10/0x10
[ 1933.622184]  vfs_open+0x82/0x3f0
[ 1933.622203]  ? may_open+0x1f3/0x420
[ 1933.622235]  path_openat+0x1c3f/0x2880
[ 1933.622266]  ? __pfx_path_openat+0x10/0x10
[ 1933.622283]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1933.622305]  do_filp_open+0x1e8/0x450
[ 1933.622319]  ? __pfx_do_filp_open+0x10/0x10
[ 1933.622348]  ? find_held_lock+0x2b/0x80
[ 1933.622372]  ? alloc_fd+0x2c1/0x560
[ 1933.622394]  ? lock_release+0xc8/0x290
[ 1933.622416]  ? alloc_fd+0x2c1/0x560
[ 1933.622445]  do_sys_openat2+0x104/0x1b0
[ 1933.622464]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1933.622491]  ? __fget_files+0x20d/0x3b0
[ 1933.622529]  __x64_sys_openat+0x142/0x200
[ 1933.622552]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1933.622576]  ? ksys_write+0x1a3/0x240
[ 1933.622594]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1933.622613]  do_syscall_64+0xbf/0x360
[ 1933.622647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1933.622668] RIP: 0033:0x7f2a74959b19
[ 1933.622683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1933.622699] RSP: 002b:00007f2a71ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1933.622714] RAX: ffffffffffffffda RBX: 00007f2a74a6cf60 RCX: 00007f2a74959b19
[ 1933.622727] RDX: 00000000000c4042 RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 1933.622738] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1933.622749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1933.622761] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1933.622783]  </TASK>
12:47:14 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000900001100000008000e"], 0x1c}}, 0x0)

12:47:14 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x2000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:14 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xf5}}, './file0\x00'})
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040))
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:14 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x1c00, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:14 executing program 3:
shmat(0x0, &(0x7f000048b000/0x1000)=nil, 0x7000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000d06000/0x3000)=nil, 0x6000)
shmget$private(0x0, 0xc000, 0x1, &(0x7f0000ff4000/0xc000)=nil)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:14 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 61)

12:47:14 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x700, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:15 executing program 3:
shmat(0x0, &(0x7f0000446000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000f00001100000008000e"], 0x1c}}, 0x0)

12:47:15 executing program 3:
shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x6000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:15 executing program 4:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x181000, 0x4)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f00008f9000/0x2000)=nil, 0x2000)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r3 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r3, &(0x7f0000797000/0x1000)=nil, 0x7000)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f000063b000/0x1000)=nil, 0x4000)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mincore(&(0x7f00007f7000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/31)

12:47:15 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfdffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:15 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xc00e, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x3f00, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000001c00001100000008000e"], 0x1c}}, 0x0)

12:47:15 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 62)

12:47:15 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r0)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x401, 0x3ff, 0x4)
munmap(&(0x7f0000db6000/0x2000)=nil, 0x2000)
munmap(&(0x7f00008eb000/0x2000)=nil, 0x2000)

12:47:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000ffffff9e00001100000008000e"], 0x1c}}, 0x0)

12:47:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x4000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:23 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0xffffffffffffffff, &(0x7f000055d000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xda02, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000bb00001100000008000e"], 0x1c}}, 0x0)

12:47:23 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 63)

12:47:23 executing program 4:
shmat(0x0, &(0x7f0000f98000/0x1000)=nil, 0x5000)
mremap(&(0x7f00008fe000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil)

12:47:23 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x900, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:23 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfeff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:23 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000c01000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x80, 0x868, 0x7)
mremap(&(0x7f00005f4000/0x2000)=nil, 0x2000, 0x13000, 0x2, &(0x7f00005a4000/0x13000)=nil)

12:47:23 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:23 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
r9 = getpgrp(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, r9, 0xab})

12:47:23 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (fail_nth: 64)

12:47:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000ec000001100000008000e"], 0x1c}}, 0x0)

12:47:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x6b00, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

[ 1951.932004] FAULT_INJECTION: forcing a failure.
[ 1951.932004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1951.933199] CPU: 0 UID: 0 PID: 13948 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250725 #1 PREEMPT(voluntary) 
[ 1951.933216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1951.933224] Call Trace:
[ 1951.933230]  <TASK>
[ 1951.933235]  dump_stack_lvl+0xfa/0x120
[ 1951.933266]  should_fail_ex+0x4d7/0x5e0
[ 1951.933296]  _copy_to_user+0x32/0xd0
[ 1951.933317]  simple_read_from_buffer+0xe0/0x180
[ 1951.933343]  proc_fail_nth_read+0x18a/0x240
[ 1951.933362]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1951.933380]  ? security_file_permission+0x22/0x90
[ 1951.933403]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1951.933419]  vfs_read+0x1eb/0xbe0
[ 1951.933443]  ? __pfx_vfs_read+0x10/0x10
[ 1951.933460]  ? lock_release+0xc8/0x290
[ 1951.933485]  ? __fget_files+0x20d/0x3b0
[ 1951.933525]  ksys_read+0x121/0x240
[ 1951.933538]  ? __pfx_ksys_read+0x10/0x10
[ 1951.933568]  do_syscall_64+0xbf/0x360
[ 1951.933593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1951.933606] RIP: 0033:0x7f2a7490c69c
[ 1951.933617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1951.933629] RSP: 002b:00007f2a71ecf170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1951.933641] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f2a7490c69c
[ 1951.933649] RDX: 000000000000000f RSI: 00007f2a71ecf1e0 RDI: 0000000000000004
[ 1951.933656] RBP: 00007f2a71ecf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1951.933664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1951.933671] R13: 00007ffd4112ae0f R14: 00007f2a71ecf300 R15: 0000000000022000
[ 1951.933707]  </TASK>
12:47:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000fffffff000001100000008000e"], 0x1c}}, 0x0)

12:47:33 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xff030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:33 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xa00, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:33 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140))
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:33 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)

12:47:33 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:47:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x8004, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x80000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:33 executing program 4:
shmat(0xffffffffffffffff, &(0x7f00006c3000/0x1000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mlock(&(0x7f0000561000/0x3000)=nil, 0x3000)

12:47:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf0ffff, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:33 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000f0ffff00001100000008000e"], 0x1c}}, 0x0)

12:47:33 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000663000/0x2000)=nil, 0x2000, 0xb000, 0x4, &(0x7f00007cd000/0xb000)=nil)

12:47:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xb700, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:33 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x2)

12:47:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x1000000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:34 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0xffffffffffffffff, &(0x7f00007d4000/0x3000)=nil, 0x1000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget(0x3, 0x3000, 0x8, &(0x7f0000a7b000/0x3000)=nil)
shmat(r0, &(0x7f00005bd000/0x4000)=nil, 0x0)

12:47:34 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x2000000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x4000000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:46 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfffffe00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:46 executing program 3:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/145)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0xffffffffffffffff, &(0x7f0000f7f000/0x1000)=nil, 0x3000)
mremap(&(0x7f0000910000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000bc5000/0x1000)=nil)

12:47:46 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/168, 0xa8}], 0x6, &(0x7f0000001640)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00d583d04adff3bd00ee7f08d5030000001c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe8}, 0x10000)
getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff23)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:47:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xef03, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x3)

12:47:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300007fffffff00001100000008000e"], 0x1c}}, 0x0)

12:47:46 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xb00, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xeffd, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:46 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
mmap(&(0x7f000049d000/0x4000)=nil, 0x4000, 0x2, 0x20010, 0xffffffffffffffff, 0xbfe0e000)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

12:47:46 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000b2c000/0x1000)=nil)
shmat(r0, &(0x7f0000af6000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000d75000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x9, 0x0, 0x2)

12:47:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x4)

12:47:46 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:46 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300009effffff00001100000008000e"], 0x1c}}, 0x0)

12:47:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9000000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:46 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000a65000/0x2000)=nil)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000cbd000/0x1000)=nil, 0x5000)
shmat(r0, &(0x7f0000d78000/0x3000)=nil, 0x2000)
r2 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r2, 0x0)

12:47:56 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf000000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:47:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xf500, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:47:56 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x1020, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:56 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:56 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000c47000/0x2000)=nil)
mbind(&(0x7f0000f15000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x1be, 0x10000, 0x4)
madvise(&(0x7f0000cd8000/0x4000)=nil, 0x4000, 0xf)

12:47:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000f0ffffff00001100000008000e"], 0x1c}}, 0x0)

12:47:56 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x8)

12:47:56 executing program 4:
shmat(0x0, &(0x7f0000536000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000588000/0x2000)=nil, 0x3000)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r2 = shmat(r1, &(0x7f000074c000/0x2000)=nil, 0x5000)
shmdt(r2)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f000056f000/0x2000)=nil, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe9f983579d464bf, &(0x7f0000000040)=0x8000, 0x401, 0x7)
shmctl$IPC_RMID(r0, 0x0)
sigaltstack(&(0x7f0000476000/0x1000)=nil, &(0x7f0000000000))

12:47:56 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000002000000001100000008000e"], 0x1c}}, 0x0)

12:47:56 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffff97, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:47:56 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000778000/0x3000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:48:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfdef, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:07 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget(0x2, 0x2000, 0x20, &(0x7f0000a47000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x64)

12:48:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000bf9000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000f23000/0x2000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmget(0x1, 0x1000, 0x800, &(0x7f0000dc4000/0x1000)=nil)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000ab8000/0x4000)=nil, 0x5000)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ca0000/0x3000)=nil)
shmctl$IPC_RMID(r2, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:48:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000004000000001100000008000e"], 0x1c}}, 0x0)

12:48:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x18)

12:48:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x1c000000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x2000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0xa3)

12:48:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x2010, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfeff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:07 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x3, 0x5, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11)

12:48:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000008000000001100000008000e"], 0x1c}}, 0x0)

12:48:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xedc0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000a62000/0x2000)=nil, 0x3000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:48:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xff01, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:07 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget(0x1, 0x2000, 0x10, &(0x7f0000ed6000/0x2000)=nil)

12:48:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x9effffff, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfffffffd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1995.383987] =======================================================
[ 1995.383987] WARNING: The mand mount option has been deprecated and
[ 1995.383987]          and is ignored by this kernel. Remove the mand
[ 1995.383987]          option from the mount to silence this warning.
[ 1995.383987] =======================================================
12:48:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x300)

12:48:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfffe, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xc00e0000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000a7a000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00004c5000/0x1000)=nil)
mlock(&(0x7f00005ba000/0x3000)=nil, 0x3000)

12:48:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x1800)

12:48:24 executing program 3:
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000c7c000/0x2000)=nil)
shmat(r1, &(0x7f0000baa000/0x1000)=nil, 0x7000)
mlock(&(0x7f0000736000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
munmap(&(0x7f0000667000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ce1000/0x3000)=nil, 0x3000)
shmdt(r0)

12:48:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000009000000001100000008000e"], 0x1c}}, 0x0)

12:48:24 executing program 4:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000080)={0x1140, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x53, 0x3, "7eab1c6a5c67fc8da9cd264b96b64c585f37716e1829ed64c1478acae998001b1336d12b2ec9be32236e043d2785b99c15ba1783be6938f43d4102fb8688c1bb584ce0070543795dc92424ee2f40b2"}, @TIPC_NLA_NODE_ID={0x45, 0x3, "94b8ea85ea5d4ad045493f7784318f2657e1f2d206289f1cfeb3d1fe1110a436f23cdb9a1d16b2430c947fd0c48d6d82c6047c3eac534702db711f55b58d19b769"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "f7273009ab25487da3d90234f81109547bc65b3e79b8201135082835f9d1462f0d069096c24981ec5638128ba5958bdb864df972ef2e5a821059bdb25ad69890cd2e81d200d03039eebcf1376bd327f174f55aac93cb01e4d4125426d32ab4b21660ff670cd0c64e883cf5d7ebc9815ecfde77065e853a7e628472643a8413b6ec75d372d532e6cbe4bc7d1c1b360c0b1db41155b93e98703b362e979ea074c5ecf3b6cb0f25a764fcf994c1c0755e4a4aee924426a4c3f13258ff81cdafe4debdca33d636b236c04c5b4346ac361a56e56c41ee62463ec207201483eb4e8b9421fac7850c647a2b23e99585a46e2be664b4857c79797b4f760687ff6a2529bb5fff7b5eed05de01a8fed78ad21ecccd1bb030c485a597826314c9b0b66dd03dd55829049a8a1e3def025985cbc9a13715e7fefd926fa8775a5be1e0ce55a12f07bdbf23f52dbd78f6e4a79d32c5c0140b9ff76c98ee1188bd705f655f58e1d69df14851564f167a3133ad3b8d99806e48ceb780c5bbe2135fd710047aaac52b16625f59de7bd4d834bfb42fbd4314f3376aad2f9137d609b236e21c2217953268bb526b5d0c8088ee11b52e2d628a4696611200ddefc7ca74461fcc21f6411e11c63d11ef420f20582fe6a94ef3fb7b940a22920ea8214fe93abf048e370104eee588542434726d8bc55337f2ef8bb21ada96dc4023e739955bddd2c6a769b16f2570ddc85a818193f06351248e1458fb124fb2e018581f9660e95c7530689d1365f0a748b635bdda45079bb6df0cec3c892a2816aa2e542f2bddf4a3e27ce444aa67cec11fdc2b3e5fd71f8c219da40a78dd15d9824675e118275d9c6d40b73c3ba8a392e06cb462bfa4577769ac5d9cf92fc10977604b825968a70cd3c98e75d86479ca47a7394b7162b59905864c780fd44f8738fee531f1720f0656d4e221b93cad00c270c4c5a36d4df049090a28c268e6365ff0549b42388858e214a0a696c81ed1a33e4f06691d0b96a25411fc89cd9c972ac171a4cb93202d61a9e8f0677df8c5f473060b6656da3b9a421fb9ff3b4192bda4ada3ba5cf2d866b578a5d1a6a502e788e432291d9e4825f1b4a0016996828c4bb3da92713101096cd1222ee8866517d8a57adaa7959390864e0a545352ee87793cdeeec9f2ea41742de6030f368c90d6523ec4b08262cec8e099ca26e1473d6f5331c55e4145b6dcfda385d7cb1ab784ee73b9a2fa7b693a5c686c002e482a63d0c92b6f5bc447a782b6c6fec94c28b44f4edcdf3471ae0bdf7573d6f6e973bf01942d52310b3b348d0a3833ca7c45b0f5cad98fa4d4c66be0811825d59c114b2d352409cda6d11fa7fb7013be354dd92287497ec622d9515c6f5e178ed9b3b79d27176e97b55bcd6b735ce2ac186b02f53159fb51644254e1529d960e2f9bfd253ced8378f2d1cdabda0c6b994d124693bf58e98a5462ac4bd9b8d18395c9b2fc2a51f63e948a43037ade1259d992aca3e3c13bc025fc8401db45c1f62e8666c1df3adf35cc9594753492a9778661f505013225bbe276f48e087de04f5a74ca6cad1b977729cb80370609a7ef3bc9bf0243951683d0590fd80ff338b7e372d61b4f5d16182ae4074ec1581449e47ee83d16d1c7263bd134e30ce0ef14747a7de47b2bd08216ee934f89dc429816c69efd606b4ddf52a9e03f06e74d0c4dc3ba920df1362b11147ea71b2abbb8b509c5adedd97b8136522fbca02b321d3696995c7cf0f18b99eb67c635d3d8e1d580ec020f8acd079d3ba8467b47ab6ae4175134e6a46801a83824769a8e4b96d0a05fc3c9aa3b73c2fcdbf56e42f2a2f83e67e1d6f8e1426c690353e2a2d6a327d419b966485d8ce0e99b408c487aa9839a04506e76e26921cee47468583e86eba18d722836151bd00fb44e7570d43b352b0f98bf5e24fd2297ee9a5fae22e337e259fc96cabadf9c1b7f20396fa02a7b867d9a94b5c6178c3d2a3106f8799dcebb1751f5f6f2a9a8b13211a314aa03d05ebac72bdfc4b267affe1be71b177ca54bccbba82bae3250dfcf2c19afbd8ad68519d0c3bfad92952fa684c4ddb367c4d1b22e4bb0ecb2944c70e6141c5804e318da8ed95d3540c9ddd5e5829ff57e45eae6e7385b246239a5cbdc3a0ccac1549482813062bbd943d2c9b37eae1228af950c1b0d75483cc81318a68ec064e7a81ccd95e7d378e145e1a3d766820128efd160ee2b54be031bbec672b1f930b056de7140d0d4df12e8ae550f9c6ef49315868f36a969c846ac76b03612fe676d22e8c7ca60acaf08ec9dba8f5ae109224e7bbecef1a9e87960cfe3c8523132b8ace9df844d8c094f69df1efafe4bc979bd272a605bd075eb14103e0677c8eea824357df78cd42cbf3f3d2767a44c8c3164c663bcf9519ba6285b3d0798c86a71f06fb77ad740a3d7fed017d536c19ff85396875d65d9427deca407b677fd9496d99bed018b61c817969b9a323e29653d82cb56f060a1837111fdc1e1c671b369f9c2cf611309dd3a51cdf454b97ca5e087f292e3ec7e410e822411cf9bcbbb5fec6a281a0d44a15a5146bb34d04a7919f16dc9bb6f6354ae34759e4402989f38be882edcdf1ce058ef8284fc4689da063043e181ca9edc7d4e91f5d05748d8d9ab66bb76da116b707fd0ec4bc55d95380d82ab91749b207104c79328d24d830160b55d94c7d2eb55e36322c56a28d4598cc5a245ccab19ea380520aa4279f54d14c17898d63e3996baf884a65fb54fda4ab1a7a52da1f0fccef38b9dd77888c15c735f231b1e4fbd3d17f59db6bbaba154496b4d44911f3ff37ef15045d7ec1a7fd0301c122cf1cfba17d60eaef19a6352f1ece3f87e0b71c8c9ad3d46e92c369b3d9281d02454eb201018a8fddded58b5c67e788dc13b2e1a20f90e0476067b66a1c355a29a10d73d29a8d6ac4e337f319e9873caf9f635a7c22ccf51294f5c32cbfca318a4a31d8c095b21e3f717e522a5706738037f1afdba5fbf08114b2f9bb3c411e385771f4f1744737f6971886eb782c8ec234e338398767b0b29453d54db179364ec7d6553a79efaaad47572d3c0a488e985d60613a9d6d4be9ad82b37fe067319acbd02998d14bc19370c0ad3a4f721029f84e60d6b2f97a5c62371c2117b0752ddaadc9a8883e57ee09ad63d1b4150cc0498af8c21df48cfe873588b33cdb9da4ee0891f1278ef9c0f51a942a9308bec871806dff91d4dd69d9abf99d0e879b8253d4aaef030518ad31a90fcfefa8bd26bca7d475e17b170674fdec76c4055b8309939ff31f530d0a36f5a11eefe292fe517fd7b44df1fd341e50d1a1ea024d592108cd042f46bf9b666d22888bb5c459b16b51b4deb2193966110a8f2068370163ed0e7f10e183baef2d3222d96b18f2594fa4361e6df3f3ac85df396d18f0d8d7e9f7a3ecd47c6854336ab1e9786f6b89bb2dbf1eca1934a0c34fb019d83a5c9ddc58998a51d5e99a1096e1880d011f5290c938e5e6c05f210b7718e1ad2336d0f04b6fab6f4f43afe31f36ea2f0a3724eaea32eb1553201e1fb8c9ab00923b7597b13afe64971a341001e2d789a64f338198f3fbdbb68915c656bba4207ca261ed2fe649f7d032577e4704176161ba8220b3e3a8d07ca129577035b2115aa212908943dfccd6c1b09a42833ba85e6d86f8db7f0813b07bcbeee2a420a115521b4d21452538d116ea538fe070198a3e104d9567e803b5425ec020fba0a8c80998736c533f6e8ff81ef16d6276a9445ab4458f0e100128f42295874e583384ba0fcd123ec37932d73bafafb8b0a9c8903c22562a70e1e7015e17601a8c1af2b9ad628bc3612cf99aa302fd96b68d58725e4da7fe857ae2ea9c93cbc322a645689157924d802ddd5767a7e6ff35707f582a1939c2d75c21e3978530c0a0207dd21d8a25642295c29a873b5bc3123998ef9bd6d24e983a5e44ace79ff24a0924622f5d1a7a4fcd6f2759c300962dc44a64e0c2c3e2efb4543269739f6ec48c8f3c584bd94c1200be765e9d29245acee1942d1b5297385cbb5e07494d7f6ec94d3c7628f9f30df1d4a596600975bcef7996d2794cb32a0292aab2d3e08e781b9bee02cb2c986cf0a0e6fb5e9000946dcf74b16ce95dce466504f5fb783167c22c4dee54489e612d0b5fe9c3b46730eb31e639d7816020c0ad41380d5189cb0e02f9a909367561207d4d6e709ffbd04074b414ff176a758a566fabbd921e0eed9ebc5f5cbcc8e01935c207ceb6a52e4b989ea8358da0bb742189ed36d154183649473211bd269743b47626f2371a391f8c079d3b39443e4bca635dc6eb759b4c9636cbe4706c906e23f85533d917ff5b287702e895f051001c8032c0dbf233410b2b553c326f423ef8042578aa899dcec3a427428eb4517530cc960756d434ecfa573bde4650fbdf66ff7e092c2509050880be1f1ce5cec48aea6bed1bbda62981eb84026f86bafa34fa18f9e7f7efd9c62e0ec6bed578e9a1ca3e7b944221ff0fe2053ab0b92aa518259f388ea3d9b63fa346b9d340b211a8d74edc77d518564d4d235b2ca69901d787a4b7edd1a3453c23373e612e791672cc1d8f7c4094985a0d27814256c905726561191008b753484301ee6adcda090d68679f1d1ee8b2f5a85bca744129ee5b5d298cff920dd0d68579984c3e188e45128d870cc3353bc9296a18feaa6127d67d764b6da202f3bee47473e2f5e77358b08c2106fbbe34b3b9ce9536162e2e57743829c01172b2a925349f0f09bb64129f8956495aaa0ba0d12e4ca6b14a140fb807f1ca690dcddc963e1e1cee9b5a2403e70dfb662e2d7737ddd8895ca33dfbd4bd7c734981e08e72be47e54f4b0f3cae6db868ac846f061e69d812c0d6376ff05767afff0103832d0d67c1f905d6031f6eeca7ed7d16f2b5cc40bcd14286c73f47485224c481ed2fc6700e56a93bac9a6b853655ed4f334eee63d6de1f2a0d7e2aad9010be641d0b7a00df10ad3e0a7860d94a87dae39126a74a8ccbf9e568f73c1c065dfa1a992f8fdd3aa511d73f835a8b06baa010da7f8eb00dad6e85cbb3832d72ed13a9efde2881737424c797722b18597c9f91b01e31314cd31f2d45608f32c6354756c36bff5c45e19a4fb844ab198de857cbf9db46f1b5a65d7fda3981c060826a36033e1c5780d4fd14875d8ef36765b59404a88aae7abd5cbf427947b015fac156a47a2073c8ea6ccfce2ea5896eb69a8d0be3aee0a7378e430362171841f67b58132d50e89c74360703f5f7be3bd4ec0b6acefb43b8cdc87cd571289b01b0e28597b0c4e9268b95dd71331c5305f84e466d61222606c950ee35b594438d262fb36d32159d395fb7c0e44be9ceffc20fbe5622462ac9f9b5b563a9a0ef8d244e0a96e7e07a9b3eed92cca7c3a3f11ea43757cc8abc83d3a6e95ed44b486cba0fdc3401bdefde86c3e151e942ff7e17856db7175f6ad84c89a73cf89b3b1110cfd7e4c1fcac1e16dc1c85acffac41aee83d0f2f3663ad6fdff59ce1c1aabb8bc92e417363832fde24a28267c09e8395ce336f7d470af1f20cd3820da8fc956a697478891c6da45230a57fceaa4ebbd42f8500730f5699e718b434064865aad16933b24082adfa629ba0d29cb86072ebf21c29317a07a9d69845bf0be7c2273992b89198dd18224417ec70bc7f24013fee59bd75895e45d9b981a22eaf8f9c87d8dcb92ba9177541c89d8c937dfce0019535c1c70a286e0f8717b14ba399bdf0d592eb539a0813dfdfb8c4c28648cd0a4b30c06328ad4bedb5b4c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "e59f9332b127594bdfdb0d15f8c86e3002c7b927921283e7b757"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x1140}, 0x1, 0x0, 0x0, 0x41}, 0x4)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmat(0x0, &(0x7f0000b92000/0x2000)=nil, 0x6000)

12:48:24 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0xa300)

12:48:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x10040, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:24 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xda020000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:24 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:24 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:24 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x40000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:24 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xf0ffffff, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000f000000001100000008000e"], 0x1c}}, 0x0)

12:48:24 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xc084ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:24 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xfffff000, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x40000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:36 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x2000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:36 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x80000)

12:48:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:36 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xffffff7f, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000001c000000001100000008000e"], 0x1c}}, 0x0)

12:48:36 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r0)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
msync(&(0x7f0000521000/0x3000)=nil, 0x3000, 0x2)

12:48:36 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
shmat(0x0, &(0x7f0000563000/0x4000)=nil, 0x6000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:48:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x80000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:36 executing program 3:
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:48:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x200000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000bb000000001100000008000e"], 0x1c}}, 0x0)

12:48:36 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x1000000)

12:48:36 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x4000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:48 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f00004a3000/0x3000)=nil, 0x3000, 0xb)
msync(&(0x7f000093f000/0x4000)=nil, 0x4000, 0x6)

12:48:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x7dfffe, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:48 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xffffff9e, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:48 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x2000000)

12:48:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000f0000000001100000008000e"], 0x1c}}, 0x0)

12:48:48 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:48 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x7000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:48 executing program 4:
r0 = shmget(0x3, 0x3000, 0x54000840, &(0x7f000090b000/0x3000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:48:48 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3b00000b020000000000f01203ab00"/24]})
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000563000/0x3000)=nil)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x3, 0xd8, 0xfff}})
mbind(&(0x7f0000a67000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x2, 0xfffffffffffffff7, 0x5)

12:48:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000090000001100000008000e"], 0x1c}}, 0x0)

12:48:48 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xfffffff0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:48:48 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfeffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:48:48 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x3000000)

12:48:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000c00e0000001100000008000e"], 0x1c}}, 0x0)

12:48:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x1000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:48:48 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="7ba3f847e8318d6ad48d2397a81c1e4065754de74d65d834f793727587f6d376c47fe16ff103f475a012b1d4a204ac40f76a610578249e2f06f93bfcbeca4e9258ffd39cf6250988952520badf409183b219e80efec539867eb88d8d09d12ae7deed5ed880b5b436e48d1206f47cc62f0bd1d55a4af6eb89ab70ffb82c81a87829c55dcdd1978661de5c280f627e2f14b9c96522dc13f72b3ead64f898a5652db69c212db0a8da20806d2291b518470d7cdaa6e5c6004a7306796f55ab03fdb821ee3e3e398dc4799af8c9938846106f1fe0e570e5558b4891b153c697", @ANYRESHEX=r1, @ANYBLOB="9e2c"])
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setuid(r3)
mount$9p_unix(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x200010, &(0x7f0000000300)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@access_user}, {@access_any}], [{@euid_gt={'euid>', r3}}]}})
connect$unix(r0, &(0x7f0000000000)=@abs={0x57ac1c974f55b7b1, 0x0, 0x4e23}, 0x6e)
shmat(0x0, &(0x7f0000872000/0x4000)=nil, 0x6000)
mremap(&(0x7f0000df4000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000872000/0x1000)=nil)

12:49:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x4000000)

12:49:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000f0000001100000008000e"], 0x1c}}, 0x0)

12:49:00 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000))
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0xffffffff, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:00 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:00 executing program 4:
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x2000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:00 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x8000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:00 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
munlock(&(0x7f0000f85000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r1, 0x986a9000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4)

12:49:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x18000000)

12:49:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000001c0000001100000008000e"], 0x1c}}, 0x0)

12:49:00 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x3000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:00 executing program 3:
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:11 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x9000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x2, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:11 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0xa3000000)

12:49:11 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:11 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000bb0000001100000008000e"], 0x1c}}, 0x0)

12:49:11 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f00006a0000/0x3000)=nil)
shmat(r0, &(0x7f000099c000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r1 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000c8c000/0x2000)=nil)
shmdt(r1)
shmdt(r1)

12:49:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x4000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:11 executing program 4:
shmat(0xffffffffffffffff, &(0x7f0000400000/0xc00000)=nil, 0x5000)
munlock(&(0x7f0000701000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:11 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:11 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000ec00000001100000008000e"], 0x1c}}, 0x0)

12:49:11 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x8000000000000)

12:49:11 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x5000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x4, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000f00000001100000008000e"], 0x1c}}, 0x0)

12:49:23 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xa000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:23 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x100000000000000)

12:49:23 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:23 executing program 4:
shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff0000/0x1000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x6000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:23 executing program 3:
shmat(0xffffffffffffffff, &(0x7f000082e000/0x3000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:23 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:23 executing program 4:
shmat(0x0, &(0x7f0000b76000/0x3000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:23 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x200000000000000)

12:49:23 executing program 3:
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b3000000b0cee97a9224e12b88e56482bd216cc686615e6783bde0e06f0e56f21c4bcc4f6d4a87d67a5a0e9b8c1ea8a768964e954a03b92715d284bcb68d1d03b9056173c4ab93f9393286da026a4e493a6f8295cce8399a4a1d6331728edd737eb8a725e8cb989b7c5252f34465b9d108668b5fd5667b34e56cd552c57b5ac114bc557005a350e14cb147b6870a0d8e800aeaed3c591fb7baa97b58ce573e10602e7c55de8f3fa6e0837c3101627c2f5ee1961172f561"], &(0x7f0000000100)=0xd7)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(0x0, &(0x7f0000f01000/0x3000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
munmap(&(0x7f00009cb000/0x3000)=nil, 0x3000)
shmat(0x0, &(0x7f0000e65000/0x1000)=nil, 0x1000)

12:49:23 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x8, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x7000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:23 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/78)
shmat(0xffffffffffffffff, &(0x7f0000e5a000/0x1000)=nil, 0x4000)

12:49:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000800001100000008000e"], 0x1c}}, 0x0)

12:49:23 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x779000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xc000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:34 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xb000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:34 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x9, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:34 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:34 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x18000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000fffff000001100000008000e"], 0x1c}}, 0x0)

12:49:34 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
munlock(&(0x7f00009c4000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:34 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x300000000000000)

12:49:34 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000f, 0x4010, 0xffffffffffffffff, 0x0)

12:49:34 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x810000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:34 executing program 4:
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:34 executing program 3:
shmat(0x0, &(0x7f0000564000/0x4000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:34 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x1c000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:34 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x400000000000000)

12:49:34 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xf, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:34 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000001001100000008000e"], 0x1c}}, 0x0)

12:49:47 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x10000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:47 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x1c, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x1800000000000000)

12:49:47 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x879000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:47 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f000059d000/0x3000)=nil, 0x0)

12:49:47 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x3f000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000002001100000008000e"], 0x1c}}, 0x0)

12:49:47 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0xc000)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/145)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:47 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x40000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:47 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
madvise(&(0x7f0000c73000/0x4000)=nil, 0x4000, 0x15)
sigaltstack(&(0x7f0000a28000/0x2000)=nil, &(0x7f0000000040))
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
msync(&(0x7f0000cd0000/0x4000)=nil, 0x4000, 0x7)
shmdt(r0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x200000)
recvmmsg$unix(r1, &(0x7f0000002140)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000000240)=""/94, 0x5e}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000380), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/52, 0x34}, {&(0x7f0000001440)=""/43, 0x2b}, {&(0x7f0000001480)=""/51, 0x33}, {&(0x7f00000014c0)=""/203, 0xcb}, {&(0x7f00000015c0)=""/140, 0x8c}, {&(0x7f0000001680)=""/180, 0xb4}, {&(0x7f0000001740)=""/137, 0x89}, {&(0x7f0000001800)=""/192, 0xc0}], 0x9, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001a40)=""/205, 0xcd}, {&(0x7f0000001b40)=""/69, 0x45}, {&(0x7f0000001bc0)=""/87, 0x57}, {&(0x7f0000001c40)=""/64, 0x40}, {&(0x7f0000001c80)=""/180, 0xb4}, {&(0x7f0000001d40)=""/198, 0xc6}, {&(0x7f0000001e40)=""/81, 0x51}], 0x7, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000002000)=@abs, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002080)=""/94, 0x5e}], 0x1}}], 0x4, 0x2, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000dc5000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x8000000)
shmdt(r0)

12:49:47 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xf0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0xa300000000000000)

12:49:47 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r0)
shmdt(r0)
r1 = shmat(0xffffffffffffffff, &(0x7f0000476000/0x4000)=nil, 0x7000)
shmdt(r1)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
munlock(&(0x7f0000520000/0x1000)=nil, 0x1000)

12:49:47 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000004001100000008000e"], 0x1c}}, 0x0)

12:49:47 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="5e1e350faba72733ec9b25c214d7877b1dce1bd0677a8462070e369f4599e78b3ce609fcee0ee22f72736190fc29c5c7f9c4f4e20659831e65cbb93ff98840bfae0b58ff63e910a408fc1c29c231788dca9441f638", 0x55}, {&(0x7f00000000c0)="343a029488407dc23f8622704539a56bbdcf2afcb489bfa6ba501bb690fb7ba294fe9b42a4571e45df7ee519880fd74b1bb05de4e1cb1bb8c0d236", 0x3b}], 0x2, 0x2, 0x2, 0x1)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0xffffffff00000000)

12:49:58 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x979000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:58 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x20000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x2da, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x40000100, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000aa7000/0x4000)=nil)
shmat(r0, &(0x7f0000574000/0x2000)=nil, 0x6000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:58 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000009001100000008000e"], 0x1c}}, 0x0)

12:49:58 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xa00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x6b000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:58 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
writev(r0, &(0x7f0000001540)=[{&(0x7f0000000000)="c64aa202681554e008442ae56c38c73de1d0c2f37258934e246ccf13c4e5b9531ee0fb636ed6de227a8ef6ba725ab9ecd1cf2e45474cc57b59daa6f75c939a2d72ea590ee8445628c52d5a5c0e97abe574a3e601968a2f86800b6bc65a9fc67e01f699cb78", 0x65}, {&(0x7f0000000080)="becfc2176f822575c88d8fd21a0260362a29192acc7d3159efadb3fc6bf4fbd86afffeaed2b839e5b94bc1ef9f52507dae507a8b03765ebd2bcc240f05f806dec653ada2057e39b64d284079c44e7def13811db70b9beaf51c2d1494d10927428b2ab894dae1cc397b68b75c2479a896ecc6915623546131e7799c040f73a6dfea2f3b0f8847a6d15698332291fdd2f3ba2388c055cec63608e243822d8d8429b9474a32c542dbebd10d943ddbf182414f8bae4c8effb047d184748d3ce47cbd9941f236050da4699b5a4eaa3cc81868f677d805606904c6c6b53c9436277b8a160fe2b825eb59b03034f91023e221f9d611bd88e30758b0899ac08e3c68fdaf87e4f29253bb33827ef9176afb62137308b179238e3645fc99b7e4046839ff3ab2357229ebff3884bc9e29269592d598b3086081dfd1a887066b8bc593afbb6ff261814b71b9d0f438a6f7283152d0fd940985ac8c2b105b08719a847a5fde1960cf0aeb5948edf0fee2b3c1d6ff37c196f6f7af16b5ab95973c1732d9766f8663bfd9bd113b45b501ff4407506d2d6ef239c667e98b545afed4d274f3efe2847cf50d8c3f22a88e8b90e9381c847e0d21fb252bc55aa456ced4a32eac2e1e04687ef396d0ffc0a4fe65dee30662c09ba6708e2f807afe118f743f8af31f99b4b51be5485be3018768da3516ebd60fa7b117c0026a415020fad337612577c3293e00f629c1aa4439804c8d33e7cfb7211b57f8b7770c0e5262795c8640d9858e01ff6cec7d472216cbc7fc2c512db55914582ccebd862dab6f15ac126becbb9ac60d646f198ab71c2bed6d2250c2363b7a5e28dbeb3737d2ead17170fc70748fcc5621f42fb1a1d8e89743b486da96084279fad6688aa2dd9db1de1fb5d2d7a2c194a5c967509a64e0582cb68429f41ed7de4add3470f97182250f4900574cf3c1a0dccce62242a1823f4e96c271def60699ac18282a17c4bb9f25ba4143c60937da8fff0c91931fbf8630c8a755c50acaf9d516eb3230a81d9b6aed56ad41abcae1801676274c54a9c296d088c51254d83edb3a162219096aac5c62a46f00c9eefc498644452c212d8e101253a8b812b4ec4c852972f216bdf5d9ca17638d51630e8dfec41b76aaacb124994f58427b05da04cc55820ee9cb075c3353ccb8cb68f71152ba16365ddf6825cff48ce591ac83964876713b41b7ec7ca98a4d72be206df07b961ebab5cb023b6dd210e37d40467ab02b74ad3a90cd9cacee8615483db4a3e5d6a10f5e7bc6d873b18a6a8aaa2216849b10d7a1d06c1ebf663f98e7805829bb9605643117794e409cd154e0fc464d68f8f67e4b121dc3c9f6a18a3fc511850561151a16a66f60fbb979055cff2f89a6b4b8262a5cd6b8093f17dc29c9a4b7e75231e732a861a2bb5a831b34e5914969a2ca824a287b3689c06a4a8e49e5ca1a5cbfb1a49a54e479e6227d21c413270ee0e89cfbf6d1bdbd4171ac2191a7821d84e916f17c9cd9e02cd8ff34c1f13d0e78c22c061eeb3c18b8e80df796ea2360b0570977c4001e470a637369e329f97b930b37303117ca4b47b8b52391a2ad57f2bbabbc8e441f6379416f8e1518256788a4701c2f28897b46589ee57cac32f7f84e8a79028df9eddaa3df2aa16a83606b034d7e7428d8435f6d2530980e912f0f532c038f3d8e6e829d7b1345a83315f3cdd74f0289ea4ab0106021361e3b7c1a99cf67e256d14aa48ca9ccb9bfe8ee9004f2b7c8858e16cd911bc7f1a5f9f0f64f1d0783888d3d333435b3081381eb574ba26a57b7aba312a676ddd4c15d2f8ce46c05897612f9fa9e615028f5fdf24574846d44bf0e26bcad2bb5fc541234a074085c81269a6513067b771b67be6e4fb591348ce689308d6d84c9164108b436c517d6c8b4bcc4deca3ce53572253a82ca6074232063c3b70a2c61662caf3ec1bf2d64bf42291df400ca6a0fde28d6cae5d169b2680e37c60692d29da316ea83ff4f1dce54c2d8d489d3a3bf81798879063855805ec04dba926f4821b2bc3e77a2612de69af7cdd045fed1b42e5607a14a94e3ef0be718bcf45b9c813624ca33ad83a3523ef6bd5a948ea068b0ce67f0c7d35f347f02c0d1b9d5e6805da5be8f9f636e7da0f940a0381bc6e907299500cef1ee73a148f47ccc1bb50c32cf17f1bc7dbae4a6f8477467867324212a56250a2f7e234d3f089a84de2661adfb5f085f8b2bdda4bac8a0c10a2be585fac7edc79e65333930da7cef30451bd24e11a037e739962fa1e4b3a9a26a5b5fabaa7fb8104052ff3d7c2f285985ca008d81f9346ffbc8079a4ae5352cf0758d3b8f275dba23367dff6a8ea0215c1292fbacbfe0d64d058b483b10c63a54c4dbb18fadaf056d080b6c7ac0e1806a8ee3e229df837dfc569fa6cab02efc52711a2e5049aed29244b0e53f8585689074628649c24d0723280f6e605a2b8371b4a79eac6fa4cab3ccdbba3d15f8790a4c9ba8c6b67b41d5ec2d6ddc63b1e3775104be11c2dd1dd79656e459adc669b3d47b3738e82dd1802c010fca91f8e0615e3f47c3e5c80c8043cef1a958d489bd92609d44eff57112d4f598e395445097e64a9b8b63fb1653b16cba8859bb89fbd0de75f1160ace22eec076640eb2a338589cbea55c42a13ff142d2b48b2a87762bb98e378febbe9ab764f9381b9079817bc8f3d2f67da1b3bad72e56f711ea284487c2dc042fb93b4ad1e213700a183cc3d0004b62511562348fbbd6a9948f5096cc8fe755c586ce21c5cf4a44fdc7b6ddb31d64f440f8a11db9625dd4dc90627f2058ef0f771392d46dceda3f50f0776f9c38502f94b6b98b37463567edfe2014cb9221acbec199078eb38ec6e99c398cc62322cdeed0c234ad7b286ed3f9042a0d4235b3230a04718e24b49eac971ee22b83d9837d11c08c131acbbfed946197820a7a71696c5ebe398b4b3de674f16d60c88e0cc354a692d7b56a9d6b2ad1f48c082b2ac66994f4aaac5bc175827203fa7376bf07f942c336b4f3302968af6a28b4af62dafd85e6ea89461c119eab98560fb442bf69e1e7f76d94bcf9b7db2f7727fb3181a87e58749fce18023dcfad3f4eafa3a395ec757bab5f02a04f330f12e1a1824a8bab91d5746f804bfeebb042770fa06505d8cd5f41ff729e8391b76a351699633bc1a9b703489301cd05efbab07f4cca9b4a0fd4d75d7b60ad020a6b49f83005e1bc44d37257fba242c2fbc65b40d1b12bc9a47308747046542a1c6ef003a64beb2661da772b566b256b1e585d8ce486b64eb557cdaa3a073d0b80687545268aa039cffa7475f7425f4909352f791f3b1c393a7876a144b7f1c18d16277e094d9941d4ffb3181b80e27cd5b29dcb08489dffebd8045a212a2957ee3b325ba490882543d30146ec108bc6efb1ec9a786e5a4054d793e21ba5cf300c369bffa9b3d23ed680db03d80d919e25cb028af648d559ea12fdf98aa1fe0ead233065ba72c584adece0ba11a5d9a8d0ceb73ee424897ced648aff9a07c12aa43e7907fa5fffbc3cc7975d8feb1ffe59aa3c2b943a16f698d70efb597d29118db296b4af0606e51bf1e74867939d71d30bb6ab4a4668154cffaa1beb8bf2d88e8badb00557804d8e74bd4d7137fd31de39d3e4449eec09e0c4384c07e7cda48c77476d03f8188abc83310cfa2b7faca7b8b8a4dadd432b701630db62f56373159b56db38e0d523c8ee073c8ae0f07d87b138f56dda0fcdee4f2822eb15840d8918e850ee134d0f8d108da307b9480b827114b5d9b55014385e9fc03380722248f92b5d03e5cc187ae022d1c890973c91d4c4a7c2fe5a64168bea786e03de852a2ef72d515fddc904976ebe6e0c140108219af06db3b488bb62df10e47a5443d1857e1918e1aa6f6677aba61138b35981b3f3bbc66440e7b3aa5b535647c74f7581a56ead3db86e6a38a626fd964dd751db613a5744f37b61c751e9e9b7c6ad83b5ac39f5d5f1faebc06e2a66ea76a31a069a4e150a2f4eadd07330ecf4c9b49b13506c47806095c0e30ccb4dd4edbd5f3df694379e43275f93e0ad6da82d8917f1b1e9aabb9a87ffe26d2c7da5b75e3a71db288d63aa7997d1637883df0b0dec78b5de40590171a7657a7e8e1181a365e7a4cdd7a56102675bbac8aa44c4c874f8b73a3f79ee200facd3960392ca7b5878734a99201f0791f0826788ba512553b952cef55b402e64caa406f8517fb438c7f90076ef5fc9a109f290e99863023c3a7d3e80f5d8f85cbca8cb216f4143f4bd1ff7887221ff47fa5ac64ce069c0901cb39d6f99a317678ead3361e7e5ec1b780c9cb68297a381683130c8fba4fafa82411cad1dc9a1674181638fc260967c3bf3905e7f52df5e76c0083228151be2940d95ad15c76c15442d031c0bf3235ed73fe5a65d76f86dcfdf654976e67a6ff6f2a69a3d845f1946dc48400b190094ce9dfb2f13d1e686a9fe59b8707e46eae821e07f0db139ed551fd4af8110e946bf5cf97d2d62e136e0b282665bb60d1aac55a8c6ef301d869968b4f32af16c812c9d911882a55f374088358c6606e017af53ab2b6e44e7f5982d0d477938d9d68baec0a805282e7d8cec901b7c5e09cd2018e813c3feedd92facf94932a4e67451f056f3d10a1156fb7ddc4c94928a3d201a23dc558b9bdf69cb2256e41cfb9454c4759cc9feb9a352061c373f6d0f1a12a55dfc944c9c3aef27a03ddcfdac1c9572aed061a58403475265dde405311cfb550c7109efb8570a1dd141e68297cfd550d4f9eefc7a177098844ae35b69a40446ec225fcce13113f5dcfc964e3856d13149eb8db9e5266a30c60007b99cb6410892d0210dbda7f5d464442f13994d843637ebaf5b5e0961850bc97935abfd972ca37addc223c542acff565318154a11408d4709178fb16746d55c21b3085e3316484db20aa441a46c06db44c54051f2d7e10fd5e8dbb85810b1ec538624518b6aef19a976d094f70b7ba19c20c4f172eeef8d74c5664993f7573e0efb18df2b8c30cfe2f219be2992806e170fea02b06bb443fc5c1c8c61d054dda80970b4e723bad0dcf863834858ff6db6f4a5d713121b4c5b5deea52c7f1039a0df3ae799d3f2a3a9590141ac1273d51e27faef3bf2dd7e930836b3b1d069b1aba612b38273c06d9c056409c4a4f96c30cf76e1b1a0fd6fba024d496243bdd8a09149ba97eede66b42f2027a8cdbf89609e35d7a9d1671222016c3368fe068d5a4af52d5a19e34db31c70a33764a116bd9c94833c7cd301f0d62ff2a4a8f5763dcd880c3cb7dbcbcb6830d68eaf86e1762248d7fb2e455b1e99914e40fe2476598baf2973d357eec00ed630d72dc032fc3dcde4ad84e81c7b8badb1467971d657aa3a70461ab4dfbd924bffb148eb812f7b7c457cbda4b374412959465f1ee775f72699555b962288e352b5ba6e18cd1582dffb63a7ccbff90b75ef70d8737bccc0c1c6f0fb26df4b49361d5226c942dd87538bd8efc7c4adbab0fdbe885f0767a8651a0a5fcf320a2fe8a07fd4274ecea63a6778f70f8a6c55a9b610e0db39d93fea89870e9c91bb563d3d7003819ad54dadde2d45be3f0c383268790eaba38f92ba302cb6427001db5876503940ed0ff11acb7e2f13d2492e33e13bbcaf8572264198c9289f32cdd20742e880a58bc475235a3d86a36984b18f9b0654b08d9a12d889df8dff6669db418622a442548af2d8335fabbf074a1f1837b5e2f73a68a83a641051ffc6df9f50ef5d46d0c4ef6df54cb1d361bdf64c44b24586a50c3538d9", 0x1000}, {&(0x7f0000001080)="0a56bd1983cec64c3a62acb6481971376b6c0b639baac56c5b6c543ad46b6653c17636caa06cfbeb7a109c90b133b4e0889ba4b192ca15a964d73df6667e1708bea9b6c778d98f3ff6761752ab1586bea3cb8e26bb4971d4b1cf583e5b228b32c8ec82cfd8f10e0f4e922d7f17fe9ca35bf8efa9fc6abc813c21790f3546b11fe967990e79de7aede3c9cb8981f5230a35d678388f0a47baeaeb9322a59c3f3e9dafd7ad37f8863528df55e908f239c69859351b1c6a86a658451c0d30bb481bed5798a5d8", 0xc5}, {&(0x7f0000001180)="dd102bd0ea815a47a02267d60fa98529329c9e801f334d43f87223bbc24f9c57f9b5d6fc2b76e1e452f09c0e91f49852bc0d92787931038d9f2d262722d262cc681b2e7d0fd4dea02129f04e67c3ccebc393ed5bdfbcedc8252b7ae19373d8869e57a9211e82f04f6f3d01e37be7e66dc1d2bad601f84e68bf462df0b04412002b9452ba3be33cbcbb33eadf21be39ad266c6d3eeb01711ce12baee0db76b88aa1c752383abfca57f1c2f7f7be48c9828b1a52ef4507f9c282a74226c74e9086c31aa9cc9b0d", 0xc6}, {&(0x7f0000001280)="9621490b3866daf54b7231a48b55f23c3f0560d80ede6e09b892ce8a1d944ec80905806347d9626e021f3f729001d55853b072588d6d07402e93c9eb5d00065bfa90ca0d5246146a6ca2e60117379db7a2fec04d60e2c516428eb84c9e62601542a0579cfd0b4bdd6bdc1894f59f801620c2a4517a753dde8083b6d2b6b8a7f623deb6c329261259022e0606ef62de078b0531d589680f3f4d85c68e3e67accf6f4b93184955d0c006ffe3852fd3ef154fdc52d3d82db632b13faf22b3ccaf26b69271a3f6cbb70c60cc2c6a96a94612794c6dade80b7310d222b6585d38dd88ec8e4a", 0xe3}, {&(0x7f0000001380)="13f6f60126a3a0128bcd288c9864ba34449227ab0423f9e8825d2759d4f0dcf7f55d0110104bb315f4229a5e9a239b775d500c9d1e462a49f8beca65c1aa49e2903e61f6edf0154f5c3b4bd8de72725727f49c81373d0e335cce47fdacdc150eaa29ba3ec90f9d7de96df4090aa9883f2ade36f524dc24216c7430da8dca941accb0aa6533558bdc0010edf0d84f2233342b3255e40acdbb37da4c3bde0ed820ce83fa8db4711ad2a6fe8ec8b7ee2cef042385d31887613602006f6114da5bb39aacdecea5f9dc82601ff32a0de2b4a14e8597022a5a671326dfb15d6e466b2be9c4", 0xe2}, {&(0x7f0000001480)="e126406bdd4cddb44305c233d23adddb004937ca7002c7b33079d3ce07fe2d017345265d0803cd22bd6428816b9f1720a893ef82c8ce0b077f4a27f6164cfdadfc7162a7c88b170a1802dc2389b0bc4bf4876fd1270d7980595c499dc9be4a891fb8462a236dab413763d38457909930adbb6c411e324297263bf4e242478cc73f37d1b504106dc4fa6d9bd2c4d386d9d6451661808f3e144310623476506799b031175eac7990b29ba90323854278ef50e9daa509156e541f", 0xb9}], 0x7)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000000f001100000008000e"], 0x1c}}, 0x0)

12:49:58 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mlock(&(0x7f0000770000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
mmap(&(0x7f0000442000/0x3000)=nil, 0x3000, 0x2, 0x10010, r1, 0x8cb58000)

12:49:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x900, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xb89, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x84, 0x0, 0x0, 0x0, 0x9, 0x13, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x4d413, 0x7, 0x8, 0x4, 0x3, 0x913, 0x7fff, 0x0, 0x80000000, 0x0, 0xa000000000000}, r0, 0x3, 0xffffffffffffffff, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:49:58 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xa79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x80040000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:58 executing program 3:
r0 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000fa3000/0x4000)=nil)
shmat(r0, &(0x7f0000fa0000/0xb000)=nil, 0x7000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:49:59 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xec0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:49:59 executing program 4:
r0 = shmget(0x1, 0x4000, 0x54000000, &(0x7f00009a1000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_RMID(r1, 0x0)

12:49:59 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x751282e0974a9fb9}}, './file0\x00'})
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)

12:49:59 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xb00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xb7000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:49:59 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f000077a000/0x2000)=nil, 0x2000, 0x13)
madvise(&(0x7f0000df2000/0x1000)=nil, 0x1000, 0x65)

12:49:59 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x20100000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:49:59 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mlock(&(0x7f0000c16000/0x1000)=nil, 0x1000)
shmat(0xffffffffffffffff, &(0x7f0000542000/0x3000)=nil, 0x1000)

12:49:59 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xb79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2109.230915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2109.235232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2109.238091] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2109.244325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2109.247494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2111.330971] Bluetooth: hci7: command tx timeout
[ 2113.377941] Bluetooth: hci7: command tx timeout
[ 2115.425919] Bluetooth: hci7: command tx timeout
[ 2117.474937] Bluetooth: hci7: command tx timeout
[ 2128.823205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2128.824414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2128.898063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2128.899190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:50:31 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000001c001100000008000e"], 0x1c}}, 0x0)

12:50:31 executing program 4:
shmat(0x0, &(0x7f0000563000/0x4000)=nil, 0x7000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmctl$IPC_RMID(0x0, 0x0)

12:50:31 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xef030000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:50:31 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000ba3000/0x2000)=nil, 0x800)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
madvise(&(0x7f00007b0000/0x4000)=nil, 0x4000, 0x4)

12:50:31 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:50:31 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x8cffffff, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:50:31 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xf00, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:50:31 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xc79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:50:31 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xeffdffff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:50:31 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xc0ed0000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:50:31 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xd79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:50:31 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

[ 2141.811723] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2141.823284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2141.825148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2141.831801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2141.835148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2143.905937] Bluetooth: hci7: command tx timeout
[ 2145.953955] Bluetooth: hci7: command tx timeout
[ 2148.001957] Bluetooth: hci7: command tx timeout
[ 2150.050060] Bluetooth: hci7: command tx timeout
[ 2161.450549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2161.451801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2161.509648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2161.511041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:51:04 executing program 3:
syz_io_uring_complete(0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000bcc000/0x2000)=nil)
madvise(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x13)

12:51:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000ffffff9e001100000008000e"], 0x1c}}, 0x0)

12:51:04 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xf6ffffff, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:04 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xe79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001340)={0x8a00400, &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200), {0x30}, &(0x7f0000000240)=""/191, 0xbf, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x9d, 0x1, 0x2b, 0x0, 0x4, 0x4b4f, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x41040, 0x6, 0x5, 0x1, 0xffffffffffff8000, 0x512, 0x5, 0x0, 0x1, 0x0, 0x7}, r1, 0x9, r0, 0x3)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:51:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xf5000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:04 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x1c00, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:51:04 executing program 4:
r0 = io_uring_setup(0x5e2c, &(0x7f0000000000)={0x0, 0xffac, 0x20, 0x3, 0xfc})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
write$vga_arbiter(r4, &(0x7f0000000240), 0xf)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000100)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@access_uid={'access', 0x3d, r7}}, {@version_L}, {}, {@aname={'aname', 0x3d, 'wfdno\x1b#!t\xf6\xfc\xd6<!\xd2\xcd\r\xf4\xe6\xef\xae\x06\xbc\xc0\xef\xc6\xa7\xd5\x0f\xf9\xcc+{V+\xa32F\xd1ozh\r7N\xc0Dq\xe8\xf4\xb1\xbc\xdd\xe6:\xef0\xb9\x8f\xf5\xff\xc7\x9d\x1cD\x9b\x9f\xb4L\xe5\xa6n\xe1\xa4\x81\xf0\xba\\\xd3\xf7.\xa4\xd4 \xfc\x86\x95\x9c\xa7\xdd\xfd:o\x13\x87\r\x96t\xc8\xb2:T\xb0\xbe\xf1\x1f\xc8{\x8f\xbd\xfc\x82\x80M\xe0\x19X\xdf_\xa3\x9f\xb1\xfd7\x81\xbd\xce\r\xe4\x8fI\x81\x1d\x13\xc2H:y\xf2\xacq\xff\x1e5{\xa8\xa5\xa1\x9d\x81\x00\x8e\xac\xd7v&X\xc4\xff\x89\x16\aP,\xe3\x1bAij\xad'}}]}})
umount2(&(0x7f00000000c0)='./file0\x00', 0x8)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r2, 0xffffffffffffffff], 0x3)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

12:51:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfeff7d00, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:04 executing program 4:
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:51:04 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xf79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:04 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xc00e, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:51:04 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xffff0000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfeffffff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

[ 2175.277478] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2175.280595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2175.282499] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2175.287504] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2175.290196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2177.314106] Bluetooth: hci7: command tx timeout
[ 2179.361956] Bluetooth: hci7: command tx timeout
[ 2181.409954] Bluetooth: hci7: command tx timeout
[ 2183.458277] Bluetooth: hci7: command tx timeout
[ 2194.692103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2194.693230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2194.795086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2194.796234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:51:37 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xff010000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:37 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = socket(0x29, 0x3, 0xaac)
ioctl$FIONCLEX(r1, 0x5450)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$rfkill(r0, &(0x7f0000000040)={0x5, 0x9, 0x3, 0x1, 0x1}, 0x8)

12:51:37 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000bb001100000008000e"], 0x1c}}, 0x0)

12:51:37 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0xffffffffffffffff, &(0x7f0000f0f000/0x3000)=nil, 0x4000)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
pkey_mprotect(&(0x7f0000532000/0x1000)=nil, 0x1000, 0xf26135de61437cbe, 0xffffffffffffffff)

12:51:37 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xffffff8c, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:37 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xda02, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:51:37 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
mlock(&(0x7f0000b80000/0x2000)=nil, 0x2000)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000606000/0x2000)=nil, 0x4000)

12:51:37 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:37 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0x0, &(0x7f0000797000/0x4000)=nil, 0x5000)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:51:37 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xfffffff6, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:51:48 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xedc000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:48 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1079000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfffffdef, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:48 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xf000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:51:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000ec0001100000008000e"], 0x1c}}, 0x0)

12:51:48 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x4000, 0xed0365998219bb41, &(0x7f0000d4a000/0x4000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/207)
shmat(r0, &(0x7f0000eb1000/0x1000)=nil, 0x4000)

12:51:48 executing program 4:
shmget(0x3, 0x2000, 0x200, &(0x7f00004a8000/0x2000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000f4c000/0x3000)=nil, 0x3000, 0x2000002, 0x12, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ce1000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x7, 0x3, 0x4)

12:51:48 executing program 3:
getgid()
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmdt(r0)

12:51:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfffffffe, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000fffffff0001100000008000e"], 0x1c}}, 0x0)

12:51:49 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x8000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:49 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1179000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:49 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x80000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:51:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x48801, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x2000, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './mnt\x00'})
close_range(r0, r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
write$rfkill(r3, &(0x7f0000000040)={0x1, 0x1, 0x2}, 0x8)

12:51:49 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="5e1e350faba72733ec9b25c214d7877b1dce1bd0677a8462070e369f4599e78b3ce609fcee0ee22f72736190fc29c5c7f9c4f4e20659831e65cbb93ff98840bfae0b58ff63e910a408fc1c29c231788dca9441f638", 0x55}, {&(0x7f00000000c0)="343a029488407dc23f8622704539a56bbdcf2afcb489bfa6ba501bb690fb7ba294fe9b42a4571e45df7ee519880fd74b1bb05de4e1cb1bb8c0d236", 0x3b}], 0x2, 0x2, 0x2, 0x1)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:51:49 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x40000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:49 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x100000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xf0ffff, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:51:58 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1279000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:58 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x8000000000000)

12:51:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x7ffffffff000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000f0ffff001100000008000e"], 0x1c}}, 0x0)

12:51:58 executing program 2:
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x7fffffff, 0x8001, 0x8, 0x9, 0x15c, 0xea}, {0x8, 0x3f, 0x7, 0x81, 0xfffffffffffffc00}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:51:58 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x200000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/57)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000e15000/0x2000)=nil)

12:51:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmdt(r0)
shmdt(r0)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:51:58 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x700000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:58 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x9000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:51:58 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1379000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x0, 0x77, 0x9, 0x6, 0x0, 0x100000001, 0x40544, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x503, 0x7}, 0x0, 0x80, 0x9, 0x8, 0x80000001, 0x0, 0x7, 0x0, 0x1})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:51:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000bb0000001100000008000e"], 0x1c}}, 0x0)

12:51:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000007fffffff001100000008000e"], 0x1c}}, 0x0)

12:51:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x7ffffffffffff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:51:58 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x800000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:51:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x1000000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x900000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x2000000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:07 executing program 2:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x87)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='ipvlan1\x00')
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000200)=0x2c)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r0, r2, &(0x7f0000000080)=0x3, 0x80000000)

12:52:07 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f00008f4000/0x2000)=nil)
shmat(r0, &(0x7f0000bbc000/0x3000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:52:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000009effffff001100000008000e"], 0x1c}}, 0x0)

12:52:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x8000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:07 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140))
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)

12:52:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1479000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xa00000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x4000000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
r9 = getpgrp(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, r9, 0xab})

12:52:07 executing program 3:
mremap(&(0x7f0000566000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000566000/0x2000)=nil)
mlock(&(0x7f0000564000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000563000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000), 0xffff, 0x7)

12:52:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x20000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:07 executing program 2:
clock_gettime(0x0, &(0x7f0000000200)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}], 0x40}}], 0x1, 0x2000, &(0x7f0000000240)={r0, r1+60000000})
r4 = getpgrp(r2)
semtimedop(0x0, &(0x7f00000000c0)=[{0x4}, {0x3, 0x1ff, 0x800}, {0x2, 0x0, 0x67878c12b98a1dee}, {0x3, 0xfffa, 0x1800}, {0x4, 0x8, 0x1000}, {0x4, 0x8, 0x1800}, {0x2, 0x3, 0x1800}, {0x1, 0x80, 0x1800}], 0x8, &(0x7f0000000280))
r5 = getpid()
pidfd_open(r3, 0x0)
pidfd_open(r5, 0x0)
getpgrp(r5)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1fd, 0x1000009}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75}, r4, 0xc, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:52:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000f0ffffff001100000008000e"], 0x1c}}, 0x0)

12:52:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xb00000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:17 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x9000000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1579000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:17 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x1000000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xf0ffffff7f0000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:52:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000020000001100000008000e"], 0x1c}}, 0x0)

12:52:17 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xfffffdb3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x40002, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none}, {@fscache}], [{@euid_lt={'euid<', r1}}]}})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r4 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r4, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x200100, 0xa6100d149c9ee52d)
r6 = openat(r5, &(0x7f00000000c0)='./mnt\x00', 0x400881, 0x100)
r7 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r7, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r7, &(0x7f0000ffe000/0x1000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x80000000})
mbind(&(0x7f0000976000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0x101, 0x4, 0x1)

12:52:17 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
r9 = getpgrp(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, r9, 0xab})

12:52:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1679000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:17 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x2000000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0xc0280, 0x0)
write$rfkill(r0, &(0x7f0000000040)={0x7fff, 0x5, 0x2, 0x1, 0x1}, 0x8)

12:52:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x100000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:29 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
r9 = getpgrp(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, r9, 0xab})

12:52:29 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x200000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:29 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1779000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:29 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xfffffdb3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x40002, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none}, {@fscache}], [{@euid_lt={'euid<', r1}}]}})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r4 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r4, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x200100, 0xa6100d149c9ee52d)
r6 = openat(r5, &(0x7f00000000c0)='./mnt\x00', 0x400881, 0x100)
r7 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r7, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmat(r7, &(0x7f0000ffe000/0x1000)=nil, 0x4000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x80000000})
mbind(&(0x7f0000976000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0x101, 0x4, 0x1)

12:52:29 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000040000001100000008000e"], 0x1c}}, 0x0)

12:52:29 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xf000000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:29 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x2010000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:29 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

12:52:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe22, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = pidfd_open(r1, 0x0)
r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x5, 0x4, 0x0, 0x0, 0x3ad1975, 0x8000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0x48200, 0x1, 0x3, 0x8, 0xff, 0x6642, 0x1ff, 0x0, 0x3fe2, 0x0, 0x4}, r1, 0x3, r0, 0xb)
fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x1, 0x1, 0x3f, 0x0, 0xffffffffffffff81, 0x481, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xffffffff}, 0x51, 0x1000, 0x80, 0x0, 0x100000000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x800}, r4, 0xd, r0, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
dup2(r2, r5)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}})
ppoll(&(0x7f00000000c0)=[{r7, 0x8008}, {r8, 0x10}, {r3}], 0x3, &(0x7f0000000340), &(0x7f00000003c0)={[0x7]}, 0x8)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0)
write$rfkill(r10, &(0x7f00000001c0)={0x7ff, 0x1}, 0x8)

12:52:29 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, 0x0, 0xab})

12:52:29 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000080000001100000008000e"], 0x1c}}, 0x0)

12:52:29 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x8cffffff00000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:29 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1879000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:29 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x1c000000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:29 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
r9 = getpgrp(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, r9, 0xab})

12:52:29 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x300000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:29 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, 0x0, 0xab})

12:52:29 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
r9 = getpgrp(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, r9, 0xab})

12:52:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1f, 0x0, 0x20, 0x3, 0x0, 0x40, 0x4, 0x1c, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0xcd44ac6, 0xfffffe00, 0x5, 0x7, 0x200, 0x7, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r0, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7)

12:52:29 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x400000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:29 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r8 = getpid()
pidfd_open(r8, 0x0)
r9 = getpgrp(0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, r8, r9, 0xab})

12:52:29 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xf6ffffff00000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:29 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1979000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:29 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x9effffff, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x500000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000090000001100000008000e"], 0x1c}}, 0x0)

12:52:41 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0xffff000000000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:41 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r7 = getpid()
pidfd_open(r7, 0x0)
getpgrp(0x0)

12:52:41 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:52:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xc00e0000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:52:41 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1a79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:52:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x600000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:52:41 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1b79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:41 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r7, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:52:41 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:52:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xda020000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 2269.494430] 9pnet_fd: Insufficient options for proto=fd
[ 2269.531553] 9pnet_fd: Insufficient options for proto=fd
[ 2272.047531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2272.050604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2272.056538] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2272.061417] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2272.064170] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2274.146009] Bluetooth: hci7: command tx timeout
[ 2276.194289] Bluetooth: hci7: command tx timeout
[ 2278.242352] Bluetooth: hci7: command tx timeout
[ 2280.289922] Bluetooth: hci7: command tx timeout
[ 2292.671515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2292.672636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2292.767166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2292.768302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:53:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000f0000001100000008000e"], 0x1c}}, 0x0)

12:53:15 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xf0ffffff, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x700000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:15 executing program 2:
munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x145042, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
write$rfkill(r0, &(0x7f0000000040)={0x4, 0x9, 0x2, 0x4, 0x4}, 0x8)

12:53:15 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:15 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r7 = getpid()
pidfd_open(r7, 0x0)

12:53:15 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1c79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:15 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:15 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
dup(r1)
clock_gettime(0x0, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000340))
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:15 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xfffff000, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 2303.069570] 9pnet_fd: Insufficient options for proto=fd
12:53:15 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
getpid()

12:53:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xc00000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
pidfd_open(r1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x4, 0x6, 0x69, 0x0, 0x80000, 0x40000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_config_ext={0x2, 0xd8e9}, 0x40, 0x1ff, 0xfff, 0x9, 0x3f, 0xd4de, 0x3, 0x0, 0xfff}, r1, 0xffffffffffffffff, r0, 0x9)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5)
r7 = getpid()
pidfd_open(r7, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}})
pidfd_send_signal(r8, 0x4, &(0x7f00000001c0)={0x12, 0x8, 0x9}, 0x0)
r10 = eventfd2(0x5, 0xc0001)
kcmp$KCMP_EPOLL_TFD(r7, r1, 0x7, r10, &(0x7f0000000180)={r5, r3, 0x1000})

12:53:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000001c0000001100000008000e"], 0x1c}}, 0x0)

12:53:24 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1d79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x1800000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:24 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

12:53:24 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
dup(r1)
clock_gettime(0x0, &(0x7f0000000300))
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:24 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:53:24 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xffffff7f, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:24 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}})

[ 2312.245074] 9pnet_fd: Insufficient options for proto=fd
[ 2312.255687] 9pnet_fd: Insufficient options for proto=fd
12:53:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000bb0000001100000008000e"], 0x1c}}, 0x0)

12:53:24 executing program 2:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:53:24 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}})

12:53:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x1c00000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

[ 2312.372428] 9pnet_fd: Insufficient options for proto=fd
[ 2312.387785] 9pnet_fd: Insufficient options for proto=fd
12:53:35 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)

12:53:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x3f00000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:35 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
dup(r1)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xffffff9e, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000f00000001100000008000e"], 0x1c}}, 0x0)

12:53:35 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1e79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:35 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}})

12:53:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x1f, 0x8, 0x80, 0x0, 0x40, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x662, 0xffff}, 0x44080, 0xffffffffffffff00, 0x9, 0x1, 0x7, 0x78, 0x4, 0x0, 0x3, 0x0, 0xb5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={<r1=>0x0}, &(0x7f0000000240)=0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x3f, 0x1, 0x7f, 0x0, 0x9, 0x81492, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x44, 0x4, 0x81, 0x8, 0x80, 0xea, 0x40, 0x0, 0x600, 0x0, 0x1}, r1, 0xa, r0, 0xb)
r2 = socket$inet(0x2, 0x4, 0x101)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0xb00, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r2, @out_args}, './file0\x00'})
pidfd_getfd(r3, r4, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000280))

[ 2323.362720] 9pnet_fd: Insufficient options for proto=fd
12:53:35 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{r5, r6/1000+60000}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:53:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x4000000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000900001100000008000e"], 0x1c}}, 0x0)

12:53:35 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x1f79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:35 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:35 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22})

12:53:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xfffffff0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

[ 2323.671149] 9pnet_fd: Insufficient options for proto=fd
12:53:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x4000010000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:35 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
write$evdev(r2, &(0x7f0000000380)=[{{r3, r4/1000+10000}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:53:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000c00e00001100000008000e"], 0x1c}}, 0x0)

12:53:35 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:35 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:47 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x2}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:47 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:47 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
r2 = dup(r1)
write$evdev(r2, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:53:47 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_complete(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0xa8, 0x3, 0x6, 0x0, 0x1, 0x14020, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xaa, 0x5}, 0x2, 0xffffffffffff96aa, 0x7ff, 0x2, 0x100000001, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x101}, 0x0, 0x8, r0, 0x8)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
write$rfkill(r2, &(0x7f0000000280)={0xda, 0x7, 0x2, 0x0, 0x1}, 0x8)
write$rfkill(r0, &(0x7f0000000180)={0x20, 0x4, 0x3, 0x0, 0x1}, 0x8)
write$rfkill(r2, &(0x7f00000001c0)={0xe5e, 0x7, 0x2}, 0x8)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/class/mem', 0x40000, 0x80)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3)

12:53:47 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x6b00000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000f00001100000008000e"], 0x1c}}, 0x0)

12:53:47 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000001c00001100000008000e"], 0x1c}}, 0x0)

12:53:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:53:47 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x8004000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:47 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:47 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:47 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:53:47 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000bb00001100000008000e"], 0x1c}}, 0x0)

12:53:57 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}})

12:53:57 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:53:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000ec000001100000008000e"], 0x1c}}, 0x0)

12:53:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2079000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:57 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xb700000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:57 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x6}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:57 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x40, 0x1, 0x0, 0x1, 0x1}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
dup(r0)

12:53:57 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:53:57 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2179000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:53:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xbfffffffffffffff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:53:58 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000200)=0xde4)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x40000006})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x20, 0x80, 0x6, 0x0, 0x2d, 0x41802, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x6}, 0x400, 0x7fff, 0x200, 0x8, 0x73, 0x7, 0x101, 0x0, 0x401, 0x0, 0x100000000}, 0x0, 0x10, 0xffffffffffffffff, 0x8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:53:58 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x7}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:53:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/253)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:53:58 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000f000001100000008000e"], 0x1c}}, 0x0)

12:53:58 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:07 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x8}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:07 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000008001100000008000e"], 0x1c}}, 0x0)

12:54:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x90)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @rand_addr=' \x01\x00', 0x1, 0x5, 0x0, 0x0, 0x6, 0x80280})
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x63b, 0x0, 0x0, 0x0, 0x0, "aa59a2b8abf01000"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0100000037e2dadc3c440617", @ANYRES32=<r5=>r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59ff0f0000f010"})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c99cc5acb7dd9f042a807936c927b03be41e2d7ca3a91b2870aa8eccbb0f10ffee7c86511828834639d783c7dc8780f8de338e9b9f33c4f1c1f8c30f83a76478b227c7fc177c984982efb11d32e960324d0ae7165492d328cda421773487fbb10d1bd14675ebbb2a8772d20fb239484944e4867ca774ac5cc368917df6b5204aef44a1359806ad2b254756d581fa886fcc52635a6c1afee9a6cbe9a8fd332f0aee2052234c81bd5d8577094be8798c86a2baa64b61767e7f87391d195b8e16505768bc184aeca05a0b9e6eb724da158185692add1af19df6bf17c6387eaa88bf628a4b936ff2decf270cba23", 0xec}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32, @ANYBLOB="d581ea7ab18b85c35271d755c4bd42ce5db07da8bf444efedd41a34cbf0bac054a33a01af55ecdd7ae554a98c3a3ace0dae912ef1ea0c6a1c0e34f92319cd83732fabe188b73528f2eaaa9d85fc8b87bd4565e1bb656a9deccae1513221debf27c8c69f2edbe1d78ce78c893853c02932f7b1d1e18adeac62a74e78cc8b27879a28c82437fbc028151c9791c6d9670b2bde26b4eefed68ad8a4a7bc3b4e377a0d1009de13b0059fd23d44eb075797f121978", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRESHEX, @ANYRES16=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r6, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r6], 0xb0, 0x4880}, 0x40001)
setxattr$security_selinux(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0)

12:54:07 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4}, {{0x77359400}, 0x11, 0x9}], 0x30)
r2 = dup(r1)
write$evdev(r2, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2279000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xef03000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:07 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}})

12:54:07 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2379000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:07 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x9}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:19 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}})

12:54:19 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0xa}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:19 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@ax25={{0x3, @netrom}, [@netrom, @default, @remote, @bcast, @netrom, @rose, @rose, @netrom]}, &(0x7f0000000280)=0x80, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xf8, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0xfff, 0x6, 0x0, 0x1, 0xfc, 0x40, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0xc)
poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1000}, {r0, 0x10}], 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:54:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000fffff0001100000008000e"], 0x1c}}, 0x0)

12:54:19 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r2 = dup(r1)
write$evdev(r2, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:19 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:19 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xeffdffffffffffff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:19 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2479000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000011100000008000e"], 0x1c}}, 0x0)

12:54:19 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xf500000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:19 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:19 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2579000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:19 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0xb}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:19 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfeff7d0000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:19 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1f, 0x7, 0x20, 0xcc, 0x0, 0x30, 0x36303, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040)}, 0xa080, 0x0, 0x7, 0x1, 0x4, 0x9, 0xfffa, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x9)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000011c0), 0x1db000, 0x0)
r4 = perf_event_open$cgroup(&(0x7f0000001480)={0x4, 0x80, 0x68, 0xfb, 0x1, 0x4, 0x0, 0x9, 0x12000, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000001440), 0x1}, 0x8001, 0x100000001, 0xfffffffa, 0x7, 0x5, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x8bd}, 0xffffffffffffffff, 0x3, r0, 0x4)
r5 = dup(r0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001700)={{0x1, 0x1, 0x18, <r6=>r1, {0x4}}, './file0\x00'})
io_submit(0x0, 0x5, &(0x7f0000001780)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x3, 0x40, r0, &(0x7f0000000180)="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", 0x1000, 0x829}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x7, r3, &(0x7f0000001200)="33181889f7bba493b98360a04a1d4479071f956b54a920f7bbc5f66fc35a6b5c05e91bb155830a08f4c1bb3bf28ec4f8f7d5cad9ad9318e48aa9aa2297e6941c60eecc2cb13caed89bb33354112e2990e448cb71f684dd4a124294ed91ef456cf1161bf73bb32c037f5f1b1b3841dd3ebf1c954c4e87af34beba2d7c66c0a2b6ff691a429e11717ad519a70c7f802b31b5ca8e253efe51d2309729cda4ce7d425f831ad213d8", 0xa6, 0x10000, 0x0, 0x3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x515, r1, &(0x7f0000001300)="dcede14f8df06c08611db75ffb1cb2757dbb0cf2524f999a1da4c2bc95d35b75a661ee81b3e6d35c534e0cdedd10248d879d526ed6897a756dd9c457b0aa2346e0fa77dba4682f6985074272e13f5b4323aeaec07477443a4741d2eef8248748b141606dcd4abebb1445d9a04979500d05579052886014195f6894b864f5aa9e7db5ec06b639ebd77352c0a284e783cc06e467ac4835e9b6dcd99a898f2bf9fee9a6b323a979bfbe1301ecce0a1e32d9580bdea7149a4a6016f095d223d5a978bf7c1f024b2960b71219f0832556a444eefe97204471b010a41fa5b4370243d70c65e14fe81449", 0xe7, 0x589, 0x0, 0x3}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x5, r4, &(0x7f0000001500)="3073fae8f267bdb7ee7f0ac34de0f712fee1d05df968b05a34375cd685acd7a41a375e84024f08f5a3eafc2968d20d10cc6433d89c1186207f7520d651dbbb47e264893227b2b386f33b2102bbb44b4a7072de2ddb6387d26993a047e54fab82e6ee4a452c9e224491c82dd5324898643f8faf36e9980c8c7507a110a6e98261805e186ac212978078ffac13a8e77cc5b3ff85a05f4b8b1368d12c1820861a90e2123f007f2bd4be7042bf402531567b462a524a5a544f82aa20d5c49ab18bb41bd548df464555bcadc727c13d7879da7509c80f328a09e1c0a2ada88e6128bb2f", 0xe1, 0x27, 0x0, 0x1, r5}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x3ff, r2, &(0x7f0000001640)="be1ff19a797003153d073bb6c60332929812e8052cec26f76c7d5a6ef9631ed246ffbe5728e54a41520eda191524c9e93aa15d4bd5e3a80f5acde470babe11a2f17f7bfeae8b5cc94dc9b706a1250ceb629e296164e6c07e38c3128da3cf637e779091d2557ca95f86776e5fbb5980539349b144ce6d6ffd39a39c26cbf52f9b5c10", 0x82, 0x1, 0x0, 0x3, r6}])

12:54:19 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000021100000008000e"], 0x1c}}, 0x0)

12:54:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000041100000008000e"], 0x1c}}, 0x0)

12:54:30 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300))
fcntl$getownex(r1, 0x10, &(0x7f00000048c0)={0x0, <r2=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004900)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}}}, &(0x7f0000004a00)=0xe8)
r4 = getpid()
pidfd_open(r4, 0x0)
r5 = getuid()
recvmmsg$unix(r0, &(0x7f000000bb80)=[{{&(0x7f0000004c80), 0x6e, &(0x7f0000005040)=[{&(0x7f0000004d00)=""/121, 0x79}, {&(0x7f0000004d80)=""/107, 0x6b}, {&(0x7f0000004e00)=""/25, 0x19}, {&(0x7f0000004e40)=""/205, 0xcd}, {&(0x7f0000004f40)=""/200, 0xc8}], 0x5, &(0x7f00000050c0)}}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000005100)=""/164, 0xa4}, {&(0x7f00000051c0)=""/92, 0x5c}, {&(0x7f0000005240)=""/204, 0xcc}, {&(0x7f0000005340)=""/115, 0x73}, {&(0x7f00000053c0)=""/251, 0xfb}, {&(0x7f00000054c0)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000006540)=@abs, 0x6e, &(0x7f00000069c0)=[{&(0x7f00000065c0)=""/157, 0x9d}, {&(0x7f0000006680)=""/171, 0xab}, {&(0x7f0000006740)=""/173, 0xad}, {&(0x7f0000006800)=""/247, 0xf7}, {&(0x7f0000006900)=""/107, 0x6b}, {&(0x7f0000006980)=""/17, 0x11}], 0x6, &(0x7f0000006a40)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r7=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000006ac0), 0x6e, &(0x7f0000007000)=[{&(0x7f0000006b40)=""/199, 0xc7}, {&(0x7f0000006c40)=""/102, 0x66}, {&(0x7f0000006cc0)=""/54, 0x36}, {&(0x7f0000006d00)=""/163, 0xa3}, {&(0x7f0000006dc0)=""/13, 0xd}, {&(0x7f0000006e00)=""/68, 0x44}, {&(0x7f0000006e80)=""/217, 0xd9}, {&(0x7f0000006f80)=""/72, 0x48}], 0x8, &(0x7f0000007080)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=<r8=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000a14f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}, {{&(0x7f0000007140), 0x6e, &(0x7f0000008500)=[{&(0x7f00000071c0)=""/4096, 0x1000}, {&(0x7f00000081c0)=""/229, 0xe5}, {&(0x7f00000082c0)=""/35, 0x23}, {&(0x7f0000008300)=""/171, 0xab}, {&(0x7f00000083c0)=""/52, 0x34}, {&(0x7f0000008400)=""/213, 0xd5}], 0x6}}, {{&(0x7f0000008580)=@abs, 0x6e, &(0x7f0000009a40)=[{&(0x7f0000008600)=""/210, 0xd2}, {&(0x7f0000008700)=""/198, 0xc6}, {&(0x7f0000008800)=""/79, 0x4f}, {&(0x7f0000008880)}, {&(0x7f00000088c0)=""/4096, 0x1000}, {&(0x7f00000098c0)=""/81, 0x51}, {&(0x7f0000009940)=""/152, 0x98}, {&(0x7f0000009a00)=""/64, 0x40}], 0x8, &(0x7f0000009ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000009b80), 0x6e, &(0x7f000000af40)=[{&(0x7f0000009c00)=""/231, 0xe7}, {&(0x7f0000009d00)=""/170, 0xaa}, {&(0x7f0000009dc0)=""/4096, 0x1000}, {&(0x7f000000adc0)=""/1, 0x1}, {&(0x7f000000ae00)=""/101, 0x65}, {&(0x7f000000ae80)=""/155, 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f000000b380)=[{&(0x7f000000afc0)=""/255, 0xff}, {&(0x7f000000b0c0)=""/142, 0x8e}, {&(0x7f000000b180)=""/163, 0xa3}, {&(0x7f000000b240)=""/157, 0x9d}, {&(0x7f000000b300)=""/91, 0x5b}], 0x5, &(0x7f000000b400)}}, {{&(0x7f000000b440), 0x6e, &(0x7f000000ba40)=[{&(0x7f000000b4c0)=""/24, 0x18}, {&(0x7f000000b500)=""/153, 0x99}, {&(0x7f000000b5c0)=""/239, 0xef}, {&(0x7f000000b6c0)=""/9, 0x9}, {&(0x7f000000b700)=""/211, 0xd3}, {&(0x7f000000b800)=""/61, 0x3d}, {&(0x7f000000b840)=""/30, 0x1e}, {&(0x7f000000b880)=""/41, 0x29}, {&(0x7f000000b8c0)=""/153, 0x99}, {&(0x7f000000b980)=""/159, 0x9f}], 0xa, &(0x7f000000bb00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x9, 0x10040, &(0x7f000000bdc0))
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8)
r10 = getgid()
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r12=>0x0}, &(0x7f0000008600)=0xc)
setregid(r12, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c000)=[{{&(0x7f00000003c0)=@file={0x0, './mnt\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)="0f0c9ead4f71eb24a1a5649d7d67f9d4b5ac426a1ffb39433bcb8baf5f8dc80d8d16b434e66e83659b0e62a923345763654d96ddeba2c6d0e464d610db5b9b44ab9e124f93960846dee13c2c35fee5f34b990802a030b602", 0x58}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f00000004c0)=@file={0x0, './mnt\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000540)="78c8d31d8dd13b1c21f241d3dbc2fad414d73cf0469bc46f63acd78b1da8952595736079416738bb8d80495a9c67c073d7014cb5d32e6c3bb921c773d73f962fc7aaef7a8edfba2a4b7541105ec140408982fe0fd8b2ab762e575d3e01e420d791abdf47dde55c736641ed91408ee8a797449d216734bbf03514ba011367e72794f96bc559aa1fc00ea1c9cc2c8de7ce6c46c5fca83b126a69d35714b208fb670f3de8611ac258d00a876eca0e1425cd0a82f81bbe161764adc69d30e9165042c290bdb4501579d2dd818e17314dfd12443487cbe731a54c212d8250e70aba1204463f737b1c707f02f95876f87ea7b14dc3c74f", 0xf4}, {&(0x7f0000000640)="62775dbeaed43b4a82bf26fbec411b871602c6284b6c1b4ebb9b10172c12aa191d2de16fe506b4282173772a5dbe07200a074d11ca499ee4008fa7b570195391ec56625681a861b3b1d6e6e13316395d8b5bd4634bd4e697b730c806c317e3da16af22738f135f2ebcc71cb830e2dc48c82c5afacfa8de7a5e", 0x79}, {&(0x7f00000006c0)="03788b0e4c701d81ff6bad1de01367442461e5f9a57f254c8229b6bd34d070902c97d3ff7f9d5697a0613552c9159f57212c1b6eabb3e8e82b645c1ebc8d105620c86bdcc8d8b02d6ed0e8bc0a6ee6940b8f42f9c5", 0x55}, {&(0x7f0000000740)="958b0f22165b9b37436af5c6f4f1a594c37c4360a593d49c2824f73d43fa719f6e7589af1eb081ad394831c9b2ea21f591b933493260ad508f5c98372d965ecc4113704aac2ce25a524fa7681ef3ee69ef1c517f24cb776bb270bd492c6cc078772ce495654da87610510aa0290da77dc7cd334cf3be91c2b4402b6be6578b0fb8d5b88eca055b09ff11751ea7434dd05389f9da108004e594945300fc09f0f54f520d344294040dfecba64cab7403e617773e030fd107e6976bb1469cccb9771e662c21f5e1601d1752cd20b2c7479923c1c0e684debfea1e0b52fe4bf5df66f661a176db4c13", 0xe7}, {&(0x7f0000000840)="d8919d021026e90f8433af676d58330624df420ac5426dfdb990534e0c08fb3f4b332fda9111fafd7236b60fc66191ed89b5d596bb72c0516312cdeb58d045643662a7175185527670f0be5c98e2c7fba101d33a58eb04a6de0154b559c80fa674fce5f4338eb55863b30d3ce997ab67c879459f81059a3c1a63c458534352e4160a6b59ee115f81e6f69aac8c1cf22dc189a323651d764574e49ab785e0ccd5ba8de3441539e3f41f3b4df000474a1a998b216e6b993c6fd7b476209730f83ead702dde78d6fb037b2ea7babf61cb06ebb153", 0xd3}, {&(0x7f0000000940)="30b65c3f93b7867800eafd9d9cfe233b1f8019ddf8dcc3933351b0597c872a936d095977164ce5820202e669ad6d686f7955905e3df80443910c1ca0bef8fcdfcfc88ae2da1dbd70d0be14714f608bc4ae1b1a99a3bb93306ae138f1b35426133bb0baa70627a0f2f865ed09532b2d5bd4f6a32d276c4279fd61d3e1158fff7de9af942d7ecfb2b8ab32d76ada8467c7bced62e96f3b49655852a03ad3f5dbc91ac47a7a0ea8742d02a12ebd6aeb344582de9cbff798f57b674a225a04ddf95c86e83104a61c59c66423f67474", 0xcd}, {&(0x7f0000000a40)="d7aa8fa7454708153d640de7244110574c533ecb68304b5396f182b77f0fd85bb68deefc80ed8b4aa1b588d9dded56f002e099e17c5030cfb2d6a714bffb764d9a630250fd24793bb82b55e3f5280ddb10d80ee4e353e5c2a4a96f589cc9577e1d67e469f71b3279165602e2729e63b7c18789d2f34205030f3758c814c2df14570dcb99b3e10455db8204b13e09d8aa2bdb3c0f7b03d8aa833802ebb8faee4ad5fb963f85c512befd4b6339fe329123bd766d7f793b1b724dd5f370e326b6e88c6de34395eb27e5bed0121a749fc7d5c4757eb5387c4445a4a485cf146407d5c78dfb3089d409061b8c570353255ef596e6f069ab5069", 0xf7}, {&(0x7f0000000b40)="acc97156624bd2f6d9f0603eff21c10625caaeccb01d9eb6abe45c9f1017bbb161f2db58cfc6afb0064b0852c8f7bb5f6bc75701157297d0f1b355d330de2fb7c0f433cbfeb672e8d7338d096c22fc74604a372518ec920f489d078305461172b938270b62f1d030145cd5e39b30dd3d3590c7086294edf51c5b8a8f4c2ab8c4c630c1eb745fbb3db6318cb3a3d109fae9abc19a8f10cab34c5f513a5a", 0x9d}], 0x8, &(0x7f0000000c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, 0xffffffffffffffff}}}], 0xf8, 0x8001}}, {{&(0x7f0000000d80)=@file={0x0, './mnt\x00'}, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004bc0)="3edd8f5b9355dd3337", 0x9}, {&(0x7f0000004c00)="dbef", 0x2}], 0x2, &(0x7f000000bf40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r12}}}, @rights={{0x10}}], 0x80, 0xc044}}], 0x3, 0x8000)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f0000000180)={0x0, 0xfb, 0xac, 0x6, 0x9, "930ea7671efea9b71d7c705a712b1095", "4e58f41d47e110bf7ca433d866269e635220cdc0854697e965f2bd813b6b6a114110a0112ab39bd4d6384dc44bf0630fe0e661662f1f201b4184600f582000005cd49d55fb5b85d6fe4e03006c7c87923531d303951db62ca3716add953dcfdbaa2431ad28f0fcb64012da6d8ef76bd0ff86407ec5e98ff038c728a2564da8dc97c0d17a5560dd47f5d69409c4e24632105b3072329948"}, 0xac, 0x3)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

12:54:30 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = dup(0xffffffffffffffff)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:30 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfeffffff00000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2679000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:30 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0xc}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:30 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}})

12:54:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2779000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:30 executing program 4:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfeffffffffffffff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:30 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = dup(0xffffffffffffffff)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000091100000008000e"], 0x1c}}, 0x0)

12:54:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2879000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:31 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0xe}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:31 executing program 4:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:31 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x1ff, 0x2, 0x1}, 0x3})

12:54:31 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r1 = dup(0xffffffffffffffff)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:31 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xff01000000000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:31 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2979000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:41 executing program 4:
shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x42, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:41 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}})

12:54:41 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000800", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fedbdf252700000006000400ffff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c5}, 0x20008000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8042)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="21f5ce82ce4446d63bc7f0584e7db7761fb9a6a50f3b602e4c8c86ffb0d8008a07f49d922cd0814c5f3e8f4c8b03b5", @ANYRESHEX=r2, @ANYBLOB=',\x00'])
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x38}}, 0x45)
close_range(r1, r1, 0x2)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x200]}, 0x8)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r6, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x204}}, 0x800)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x20048810)

12:54:41 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2a79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0xf}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:41 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xffffffff00000000, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000f1100000008000e"], 0x1c}}, 0x0)

12:54:41 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

12:54:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000001c1100000008000e"], 0x1c}}, 0x0)

12:54:41 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x10}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:41 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2b79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xffffffffffff0700, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:42 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:42 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfffffffffffffdef, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000ffffff9e1100000008000e"], 0x1c}}, 0x0)

12:54:42 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

12:54:42 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='pids.max\x00', 0x2, 0x0)
read(r0, &(0x7f0000000040)=""/175, 0xaf)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

[ 2395.554947] Bluetooth: hci7: command 0x0406 tx timeout
12:54:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x18}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:54:53 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2c79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:54:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xffffffffffffffbf, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:54:53 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}})

12:54:53 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$rfkill(r0, &(0x7f0000000040)={0x9, 0x0, 0x2, 0x1, 0x1}, 0x8)

12:54:53 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

12:54:53 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000bb1100000008000e"], 0x1c}}, 0x0)

12:54:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x94006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r1 = getpid()
pidfd_open(r1, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1})

12:54:53 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01, 0x0, 0x7}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:54:53 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x5, 0x4, 0x7f, 0x4, 0x0, 0x1, 0x1001, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x840b, 0x1, 0xffff, 0x0, 0x3, 0x5, 0x8, 0x0, 0x60b3}, 0xffffffffffffffff, 0x1, r0, 0x3)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:54:53 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:54:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:55:04 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01}, 0x3f, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:55:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xfffffffffffffffe, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:55:05 executing program 3:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:05 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}})

12:55:05 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2d79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:55:05 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000", @ANYRES64=0x0, @ANYBLOB="ffff0000000000002e2f66696c653000"])
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x40, 0x0, 0x9, 0x0, 0x0, 0x29490, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x290, 0x0, 0x200000, 0x2, 0x1, 0x7, 0xf295, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x167f02, 0x0)

12:55:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000000ec01100000008000e"], 0x1c}}, 0x0)

12:55:05 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x2}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:55:05 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01}, 0x0, 0x3, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:55:05 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2e79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:55:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000fffffff01100000008000e"], 0x1c}}, 0x0)

12:55:05 executing program 3:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:55:05 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RWALK(r0, &(0x7f0000000040)={0x57, 0x6f, 0x1, {0x6, [{0x92, 0x3, 0x5}, {0x20, 0x1, 0x5}, {0x0, 0x3, 0x1}, {0x40, 0x2}, {0x1, 0x4}, {0x40, 0x1, 0x1}]}}, 0x57)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:55:05 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01}, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xab})

12:55:05 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x4}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:55:05 executing program 3:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:05 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x2f79000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2415.852812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2415.856256] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2415.859003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2415.863351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2415.872208] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2417.891335] Bluetooth: hci7: command tx timeout
[ 2419.939288] Bluetooth: hci7: command tx timeout
[ 2421.987497] Bluetooth: hci7: command tx timeout
[ 2424.033924] Bluetooth: hci7: command tx timeout
[ 2436.028886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2436.030160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2436.066671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2436.067769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:55:40 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x800)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x3, 0x80, 0x8, 0xd1, 0x0, 0x8, 0x40200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x2090, 0x8, 0x1, 0x9, 0x1f, 0x9, 0x81, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r1, 0x8)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="08010001fc010000e40100000008000031000000ffff0000000000000000000082d88de4cacfa47a1a3387d53c4af1428c67f31ac2d45fad73c7a69c8e74c888c0d4e301147019b590eafec0983f9a30e182d20fab6e4d9b694adab2e0fca661d3c7c06e7d5c039841aa2523d4e87d2ad157778c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200"/372], 0x174)
dup2(r2, r2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)={0x40000, 0x1fa, 0x10}, 0x18)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
ioctl$KDSETMODE(r6, 0x4b3a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1, 0x4, 0x6, 0x1800000})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:55:40 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:55:40 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xab})

12:55:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000f0ffff1100000008000e"], 0x1c}}, 0x0)

12:55:40 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x109201, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
syz_open_pts(r2, 0x80080)

12:55:40 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3079000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:55:40 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x9}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:55:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:40 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab})

12:55:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:40 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x6, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:55:40 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee00, 0xee01, 0xee01}})

12:55:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:40 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0xf}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:55:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000007fffffff1100000008000e"], 0x1c}}, 0x0)

12:55:40 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:40 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3179000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:55:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x5, 0x58, 0x4, 0x0, 0x70874f68, 0x10, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x8d4c59629615ced3, @perf_bp={&(0x7f0000000040), 0xc}, 0x40002, 0x0, 0x4, 0x0, 0xffffffff, 0x5, 0x6, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x8, r0, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:55:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x7, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:55:50 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:55:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
write$rfkill(r0, &(0x7f0000000040)={0x3f, 0x6, 0x0, 0x1}, 0x8)

12:55:50 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x1c}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:55:50 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:50 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000009effffff1100000008000e"], 0x1c}}, 0x0)

12:55:50 executing program 3:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:55:50 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3279000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:00 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3379000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:00 executing program 5:
r0 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$read(0xb, r1, &(0x7f0000000340)=""/38, 0x26)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
setregid(r4, 0x0)
keyctl$chown(0x4, r0, r2, r4)
r5 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
write$cgroup_type(r5, &(0x7f0000000000), 0x9)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="747261c066dbae0619b79731296e737d6a455ad4dbd002750685491c1b127f0cc65415118f1decbfc16bee83e14e54e47761d9278e1b11b1b26394d7c12f597a028aeeeb4fdbe4792c77f978c02552031ee907645b480dc0b92448cb553a6be6ead8925be498f562e5", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00'])

12:56:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000f0ffffff1100000008000e"], 0x1c}}, 0x0)

12:56:00 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:00 executing program 2:
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000000003000000000000000400000007000000090000000000000008000000000000000000000000000000030000000000000000000000000000000000000000000000050000000000000000000000000000000100000000000000d60d000000000000050000000000000000000000000000000000000000000000fa5712ce0000000000000000000000000900000000000000ff0000000000000002000000000000000000000000000000000000000000000000360000000000000000000000000000440d00000000000000000000000000000700000000000000000000000000000000000000000000000900000000000000000000000000000006000000000000000201000000000000030000000000000000000000000000000000000000000000000a00000000000000000000000000007f0000000000000007000000000000000200000000000000000000000000000004000000000000000510000000000000000000000000000006000000000000000700000000000000070000000000000000000000000000000000000000000000002c00000000000000000000000000000000010000000000080000000000000003000000000000000000000000000000000000000000000000080000000000000000000000000000ccb30000000000000000000000000000810000000000000000000000000000000000000000000000020200"/536])
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
splice(r0, &(0x7f0000000280)=0x7f, r0, &(0x7f00000002c0), 0x200, 0x0)

12:56:00 executing program 3:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0xfe, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:56:00 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x2}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0xfeff, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:56:00 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x2a8, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x27c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'cache=loose'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'cache=loose'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']/,((\b%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb316}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '${%)-)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'version=9p2000.L'}]}]}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "2c3ef77e48df27bcae9040f9c411f0ad0569873c3dbf94b302c4f55ed41a106f3319a320d64fd0e2dd38de6e81eddf3301fe3bba078c5ad9ff9ec5ffb46710270e0d1828104d0af53c0ef5cdd27992f1c61d2d67c99e89da7fc98de89b2936d967fd21e759692dd448e686f13aad8263c5f847adf30a980a836328deed85550915d962a90d72fb40017af2889985e9a8b0"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "0ea4e1170bc2fa3c2ddc66adc1e3c8cb4eaffde40884ec2e3c2895bc4d79a0bce78d70f690b168a025f5d4d6a2b27f3b0a5d6249e80136a49cdf71c96bad95933789a098992e9fcf378519668f05268f3a60635496342cc270960a6fc5305c4e276997a770ba0f0f91681e3e39cef96196e6b0b05e249e9fc39332bdf23e9e1455f5fb341a69364c02744362ce4715dd27c65f0547413dabfcf25a328909cfa709b0f34fe653f336eb5abb22e1316c5e0cc4a769f5c0e7edba6eb86906bf254b4af2658999913286f01d7f1d3a5b6b7c0b0e24b38ed3c9210dd30acad6f95a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x2}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x516}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x80}, 0x440)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
setregid(r4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x260a496, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@mmap}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '@*)]'}}, {@nodevmap}, {@version_L}, {@nodevmap}, {@uname={'uname', 0x3d, '\x8aI1\x8e\x01\x80\x00\x00'}}]}})

12:56:00 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3479000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:00 executing program 3:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:00 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = getpid()
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x81, 0xfa, 0x7, 0x6, 0x0, 0x2, 0x14100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x11050, 0x81, 0x4, 0x9, 0x5313, 0xd72, 0xd25, 0x0, 0x6, 0x0, 0xb9}, r2, 0xa, 0xffffffffffffffff, 0x10)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000040)={{r0}, {@void, @actul_num={@void, 0x6, 0x4b}}})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:56:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x4}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000e"], 0x1c}}, 0x0)

12:56:00 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3579000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:00 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:10 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="8472616e7380000000646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

12:56:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0xfffe, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:56:10 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3679000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:10 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x8}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:10 executing program 2:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
sendmsg$nl_netfilter(r0, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1070, 0x4, 0xb, 0x101, 0x70bd25, 0x25dfdbfe, {0x1, 0x0, 0x1}, [@nested={0x100c, 0x25, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @pid}, @generic="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"]}, @generic="5232bf9a0da08175aed49e54e97b39a68c5786a57b8026f4ddbfd3c8c472eccc8556c6d8e082c3660c7e8003423669afd2fe88f3d038bcc54c", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x41}}]}, 0x1070}, 0x1, 0x0, 0x0, 0x48080}, 0x40000)

12:56:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000200000008000e"], 0x1c}}, 0x0)

12:56:10 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
dup(r0)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3779000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:10 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000e"], 0x1c}}, 0x0)

12:56:10 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d95126045de522219421fb757819f96636b1e5e6e2f9da335e4daa81df8b59a5bb5afaef1e7fcf038388a9e4395527772aa125ca3d159f79675221dc3c833cdb9117b895d241973a6a53785c1a5f9c33e6ae4f225584ac4bee0a37786699", 0x5e}, {&(0x7f0000000080)="fe32f1affe75105b46acdc2265d9edfd18c90b50461d42ab40ca0914283a11dadd2197be04742077d51cc94e00a272da6e0fd1", 0x33}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}], 0x4, &(0x7f00000003c0)=[{0x98, 0x0, 0xfff, "4e96ae8ca725242dcf416f5e06d3f8e907a9ac4e2601cf5957b8fc8d41948ed7fb25fbf7b66f0b915c541bcbeaede78d0e5151ab474848848f18a4cc479f2c0f08ce46efc018fe652888b680b07fc06757611e25f5a3634321d6aaec54f7b78adf0abf270c3394a89af8d0905c1db7685ceff4baf0606f3db61b5dc4680f3e6c4f9a5040"}, {0xb0, 0x119, 0xffffffff, "229545eb5cf7e49d22bd7604f1c3fe15f71dd3e557c32a93dd5f1fd42096b169743c31f6c875774c6f1515e6cda4537fa1abe1bc833be6b54c76b70feb9c70366aafebec031dffc68750c3ab14134fd5ae92c8d083943004dc82866409a12fd85908cf97dfa81fb04262d20ada33af65b99efd42f5aa037315035e81bb2682a3528f08141362e30ff3a332edd53239047f82f5a21d42de4a78"}, {0x108, 0x111, 0x800, "7f25722b24f0e0c01efba6b519c9bdd504b55b26afdbf3bc28204217435e8a2dde566e7cf279f26d10cecbd221983938afb753018d233553df4d892aa598dcd59b3cc70c98c8dd573d41e60cf17907e5b612ab63cbb217862c93879536bb0d13bb80ef74e66ae1ae05342d286be3e320523a8c91a73e9410208600f64fec411bf9a7911ead6ed3ab4f01906befe11d49621b2f914022f4cad4e6b23d972f666dec4a92e66f5d7e303b1767928ab8715c32a361427045db5dc673079a20e4593683719e7397c825fdd78a436d1ee3dd56a95554c28ec365abbc44c052b3925fb05656206e0bac574db06680224fdf9eb61e33ef86343d95c7"}], 0x250}, 0x1814)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

12:56:10 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r1 = getpid()
pidfd_open(r1, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xff, 0x0, 0x3, 0xd9, 0x0, 0x3, 0x90e0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffff80, 0x4, @perf_config_ext={0x8, 0x4}, 0x0, 0x3, 0x9, 0x1, 0x1, 0x0, 0x6f5f, 0x0, 0x9, 0x0, 0xf4}, r1, 0xb, r0, 0x9)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x3, 0xa, 0x5, 0x0, 0x100, 0x80080, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x110, 0x100000000, 0xfffffffc, 0x2, 0xfffffffffffffffb, 0xffffffff, 0x3, 0x0, 0x10001, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r2, 0x0)

12:56:10 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x9}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:10 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:10 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
dup(r0)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3879000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:10 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x3f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:22 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trtnsKfd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0c03"])

12:56:22 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x8800000, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:56:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
dup(r0)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:22 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2da200, 0x8)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'syz_tun\x00'})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x28a, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
dup2(r1, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x1, 0x11, 0x6, 0x0, 0x3ff, 0x80, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x10001, 0x400}, 0x140, 0x7fffffff, 0x0, 0x6, 0x101, 0x0, 0x7c97, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x0)

12:56:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xf}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:22 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x4000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:22 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000600000008000e"], 0x1c}}, 0x0)

12:56:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, 0x0, 0x0)

12:56:22 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:22 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x5803000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000700000008000e"], 0x1c}}, 0x0)

12:56:22 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x3f7, 0x8, 0x70bd27, 0x25dfdbfd, {0x5, 0x5, './mnt', './mnt'}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2402c800}, 0x64048000)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="000897ff9bcef4a290637cabce2bbae617fc9ceb912dc59c85898909d8c3b57ead688e502c177dff2fc8066aed5be39b0eaad159e6ac9de65cda135201d7e870", @ANYRESHEX=r1, @ANYBLOB=',\x00'])

12:56:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x1c}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, 0x0, 0x0)

12:56:22 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mremap(&(0x7f0000faa000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000563000/0x3000)=nil)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:22 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000540))
syz_io_uring_setup(0x5fbc, &(0x7f0000000000)={0x0, 0xd1da, 0x0, 0x2, 0x323, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x6)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040000, 0x0, {0x0, r2}}, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r2}}, 0x633)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0xfffffffffffffffc, 0x80800)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

[ 2490.891551] 9pnet_fd: Insufficient options for proto=fd
[ 2491.656765] 9pnet_fd: Insufficient options for proto=fd
12:56:33 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, 0x0, 0x0)

12:56:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000800000008000e"], 0x1c}}, 0x0)

12:56:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xf0}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:33 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:33 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r4 = fsmount(r1, 0x1, 0x70)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8040)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
close_range(r0, r3, 0x2)

12:56:33 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:33 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0xfffffffe, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:56:33 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x26102, 0x90)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x13, r1, 0x8000000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

12:56:33 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:33 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}], 0xc0)

12:56:33 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000900000008000e"], 0x1c}}, 0x0)

12:56:33 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x2da}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:33 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x97ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xea}, 0x0, 0x7fffffff}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sysrq', 0x4800, 0x10)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1)
fcntl$setlease(r0, 0x400, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='/dev/rfkill\x00')

12:56:34 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}], 0xa8)

12:56:43 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xa0cd9dd100000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000a00000008000e"], 0x1c}}, 0x0)

12:56:43 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x7fffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:56:43 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x20, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24012005}, 0x64000830)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77cfd533af3d", @ANYRESHEX=r3, @ANYBLOB=',\x00'])
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000180))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:56:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x900}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}], 0x90)

12:56:43 executing program 4:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', <r3=>0x0, 0x7, 0x1, 0x5, 0x287, {{0xe, 0x4, 0x0, 0x4, 0x38, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x39, 0x3, 0x4, [{@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xfff}, {@local, 0x42}, {@multicast1, 0x4}]}]}}}}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x41, 0x2, 0x70bd29, 0x25dfdbfe, {0x1f}, [@nested={0xc4, 0x13, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xa, 0x54, 0x0, 0x0, @str='caif0\x00'}, @generic="b5827ab19a358e5e8de1f4c15d4d35fca271bc1cc673fa5774e0dd963448f95691ed8d156034f2bf44632c751e8b612b967b5cacdeadf1b751adc6ef6ebf28010ffb5b3fe54a99b210742e9a65ed059b87b80fa2642edb344a33f7e2af73aa599f37a37cff2eb03ae862290d8a857005e29a0f40bd7eb73cea6604dbc56b361a87db199af9d0e14d64ce40bf1214a06d1123b982e1e9775e", @typed={0xc, 0x8b, 0x0, 0x0, @u64=0x400}, @typed={0x8, 0x7c, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)={0x1ec, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x42}}}}, [@NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x1, 0xc, 0x6c, 0x24, 0x24, 0x2, 0x1b, 0x48, 0xb, 0x16, 0x30, 0x1, 0x1, 0x16, 0x6, 0x1, 0x36, 0x36, 0xd0, 0x6c, 0x9, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0xac4a, 0x4, 0x81, 0x79, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0xd6, 0x2, 0x400, 0x400, 0x1, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x8000, 0x192, 0x6, 0xa3b0, 0xafb, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x18, 0x30, 0xb, 0x1, 0x16, 0x36, 0x6c, 0x36, 0x30, 0x9, 0x1, 0x5, 0x5, 0x1b, 0x4, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0xd73, 0x7fff, 0x2, 0x6, 0x3, 0x6f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x4, 0x60, 0x30, 0x1b, 0x4, 0x12, 0x1b, 0x48, 0x5, 0x18, 0x6, 0x48, 0x1, 0x1, 0x2, 0xc, 0x60, 0xc, 0x60, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x181f, 0x8, 0x3, 0x9, 0x37f6, 0x0, 0x2f2]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x0, 0x2, 0x6, 0x6, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0xb, 0x6, 0x1b, 0xc, 0x24, 0x12, 0x4, 0x2, 0x18, 0x9, 0x18, 0xc, 0x16, 0x60, 0x0, 0x4e, 0x3, 0x16, 0x12, 0x1b, 0xc, 0x1b, 0xc, 0x3, 0x30, 0x41, 0x12, 0x9, 0x4, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x2, 0x41, 0x5, 0xfffd, 0x7, 0xfff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x200, 0x4, 0x26, 0x30, 0x39f, 0x6]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x6, 0x7, 0x4bc, 0x3, 0x2, 0xc7a]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x140, 0x7, 0x8, 0x1, 0x6, 0x1ff, 0x7ff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x4, 0x8, 0x4, 0x0, 0x5, 0x4add, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3, 0x8, 0x3, 0x7, 0x8, 0x5, 0x200]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x4, 0x4, 0x5, 0x7a, 0xc, 0x79, 0x2]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x2, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1ec}}, 0x10)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000120000002000018008000100", @ANYRES32=r7, @ANYBLOB="14000200697036657273705d0100000000000000"], 0x34}}, 0x0)
sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x118, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf44}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca600000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c8, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40c0}, 0x80)
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000a00)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6a, r2})

12:56:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000b00000008000e"], 0x1c}}, 0x0)

12:56:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xec0}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:43 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

12:56:43 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xf00}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:43 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xe4ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:43 executing program 4:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:43 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}], 0x78)

12:56:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0x1c00}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:54 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
io_setup(0xfff, &(0x7f0000000000)=<r2=>0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000680)=@get={0x1, &(0x7f0000000640)=""/22, 0xffffffffffff0000})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="0d00b85a0c182ca00d7666ed38568b8f75f663db49b3951fe69ee77c68f866e16b56193209ed753c1448df7659a5b23f2f3c326b0b9f73d58be877d3d18d20b388e6f2e623d02e68122b4394ea97a3fa49f9f78b02b3ca01e6c782b44a4b99b4235d2e83735209e46b2d3733fc9edf585609dccef27ce61b1482e38d6813e57034ec76e197772dba122452e0ebab38ba727d02a7cb290000000000"])
r5 = syz_open_dev$vcsu(&(0x7f0000000340), 0x5, 0x181042)
io_submit(r2, 0x4, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000040)="fa7a26d5221d", 0x6, 0x2, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xfff, r0, &(0x7f00000000c0)="dcfc61934e6cf61c67dce6ec3d51fb67517b59e5f6a16c63dcf6c8a0a180a8b68567ae053d1882f5953a5c2102b1189a8935c337d7a8ba2a07a2bfceab0565e00bef8507804255f24b7df1d1cc79f26d371f0f1a6a5aa04d29d27c75fde4e5c92977dbe6a90387f7add28698c08b572b87082eabef9d82517a8cc09e364b1839f40d8d49734285f354421cdc3ea0fcb584d3fad398d543f66a20de7ba71a684193412bd5920f5d59f4e8e4a60bff9b377430640b7ca25c71b7450856f62dd43f22986e7c4f34a1e5ee413f37bd", 0xcd, 0x4, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x3, r1, &(0x7f00000003c0)="736c4310b3ff8857f1605fa141cd8a91e6d382891b50ec1f420641f9eec1cc73d959e9e419bb95c94753ee84a0338c26ec2eefe7d5067ee103168e74542e4e579d5315d69e231973a22e21ff948d63d22b6fa51a594206289f95f72a96ec1e577cc04b2fd69ce03cb8ce32f9389303b83becb1f9ce89eec976055ab41d6b147cc438697a986b9dd9cbdb0ac2dd4ebaee8f81fa42192b8fcf03085d5b2a85", 0x9e, 0x11, 0x0, 0x1, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r5, &(0x7f0000000480)="cfa5f410bc987499483e531ab1b8f202d3961489c6a0c28d5ac75e365900c9", 0x1f, 0x0, 0x0, 0x5, r1}])
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}})

12:56:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:56:54 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000c00000008000e"], 0x1c}}, 0x0)

12:56:54 executing program 4:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:54 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000040)="60b6256c34e69c1f68f492317f671ef62f569380a04f8f0a3d9c14d6a2a97a2e36a9bd125d84d3c9dc30bff16b778c8a65c3696ed59317a27a380746fccc876e0b22173e3911c09132831f8cf51fc947877c65e34b8c54e2db6fbcfde3531c0e7b835e09a14cff1663947ef08a6d8490c9afc4f542", 0x75)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:56:54 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}], 0x60)

12:56:54 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}], 0x48)

12:56:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xc00e}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:54 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x5, 0x2, 0x1}, 0x8)

[ 2522.633702] 9pnet_fd: Insufficient options for proto=fd
12:56:54 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfdffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:56:54 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:56:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000e00000008000e"], 0x1c}}, 0x0)

12:56:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xda02}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:56:54 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, <r1=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>r0, @in_args={0x4}}, './mnt\x00'})
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x81, 0x67, 0x7, 0x8, 0x0, 0x80000000, 0x34000, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0xffff, 0xffff}, 0x8080, 0x401, 0x40, 0x2, 0xfffffffffffffffd, 0x3, 0x200, 0x0, 0x3ff, 0x0, 0x1}, r1, 0x4, r2, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x80, 0x7, 0x4, 0xbb, 0x0, 0xfff, 0x23, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6, 0x9}, 0x40041, 0xffffffff, 0x20, 0x0, 0x357, 0x0, 0xc4b}, 0xffffffffffffffff, 0xb, r0, 0xa)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

[ 2523.440404] 9pnet_fd: Insufficient options for proto=fd
12:57:05 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:57:05 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xf000}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:57:05 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfeff000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:05 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}], 0x48)

12:57:05 executing program 5:
r0 = open(&(0x7f0000000080)='./mnt\x00', 0xc84c0, 0x8)
open$dir(&(0x7f0000000040)='./mnt/file0\x00', 0x14001, 0xa)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xaa0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

12:57:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="fe", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:05 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = inotify_init()
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xc1c)
lseek(r1, 0x81, 0x2)
r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x5, 0x2, 0xfc, 0x0, 0xfffffffffffffff7, 0xa0000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x184, 0x7, 0xb348, 0xf, 0x2, 0x7ff, 0x7ff, 0x0, 0x6, 0x0, 0x8001}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x8b, 0xfb, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x80010, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000180), 0x1}, 0x40881, 0xffffffffffffffff, 0x8, 0x6, 0x10000, 0x6, 0xd82, 0x0, 0x5, 0x0, 0xfff}, 0xffffffffffffffff, 0xd, r2, 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
fcntl$getownex(r0, 0x10, &(0x7f0000001800)={0x0, <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="6639d8bf1a3500000000020000002d", @ANYRESHEX=r7, @ANYBLOB=',\x00'])
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
fcntl$setownex(r3, 0xf, &(0x7f0000001840)={0x2, r5})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:57:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000f00000008000e"], 0x1c}}, 0x0)

12:57:05 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}], 0x48)

12:57:05 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11, 0x0, 0xffff}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:57:05 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:57:05 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xfeffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:05 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001000000008000e"], 0x1c}}, 0x0)

12:57:05 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x0, 0x80}], 0x60)

12:57:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40f7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x80000000)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='Lwfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

12:57:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="fe", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:06 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xff03000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:06 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x3, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:57:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="fe", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xfa, 0x3, 0x76, 0x6, 0x0, 0x71, 0x9028, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x2, @perf_bp={&(0x7f00000002c0), 0x2}, 0x2200, 0x3, 0x3, 0x6, 0x291, 0x6, 0x81, 0x0, 0x6, 0x0, 0xc5}, 0xffffffffffffffff, 0xb, r0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x400)
close(r0)
fgetxattr(r0, &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)=""/199, 0xc7)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8100)
close(r1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)

[ 2534.116133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2534.125634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2538.914051] Bluetooth: hci7: command 0x0406 tx timeout
12:57:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000200001100000008000e"], 0x1c}}, 0x0)

12:57:16 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x1080800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:16 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="fe", 0x1, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:16 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x11, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:57:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
recvmmsg$unix(r0, &(0x7f00000021c0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/247, 0xf7}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/237, 0xed}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/223, 0xdf}, {&(0x7f00000019c0)=""/81, 0x51}], 0x6, &(0x7f0000001ac0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010005a2fdf7f023", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/130, 0x82}, {&(0x7f0000001d00)=""/234, 0xea}], 0x2, &(0x7f0000001e40)}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001f00)=""/255, 0xff}, {&(0x7f0000002000)=""/51, 0x33}, {&(0x7f0000002040)=""/39, 0x27}, {&(0x7f0000002080)=""/159, 0x9f}], 0x4, &(0x7f0000002180)}}], 0x4, 0x40, &(0x7f00000022c0))
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002300)='/sys/kernel/sunrpc', 0x48000, 0xe2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)

12:57:16 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x0, 0x80}], 0x60)

12:57:16 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

[ 2544.259009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
12:57:16 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x74, 0xc00e}, @void}}}, 0x1c}}, 0x0)

12:57:16 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x0, 0x80}], 0x60)

12:57:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffff7f00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:16 executing program 4:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

[ 2544.369383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
12:57:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
pread64(r0, &(0x7f0000000040)=""/106, 0x6a, 0x6)
r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
pread64(r2, &(0x7f0000001340)=""/4096, 0x1000, 0x6)
r3 = getpid()
pidfd_open(r3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x35, 0x3, 0x46, 0x81, 0x0, 0x1, 0x536d479a36302115, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000180), 0x2}, 0x5100, 0x200, 0xffffff60, 0x6, 0x7fff, 0x4, 0x7fff, 0x0, 0xa1d, 0x0, 0x4}, r3, 0xd, r1, 0x3)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:57:16 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x2, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:16 executing program 5:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x5, 0xa5}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x1, 0x7}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0x9, 0xff, 0xff, 0x7f}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x8, 0x1}]}, 0x4, [{0x88, &(0x7f00000000c0)=@string={0x88, 0x3, "d91291bd2bbcefc20416cf9003f024835261e4a42972d6518b5635e46f19908840a501590217508acff79dd1995ea029e29fff5f2c977b7e98e8f6d4a29d791d1aad62dffdfc946f1ed5c82edcd3a15dc911a06610e2d5df46c380cec3d5b8a650f0569e4b4957afcc359bc142462e3d9851e7f9942352d91d8ef8a57443de87549ea25fa4e5"}}, {0xe4, &(0x7f00000003c0)=@string={0xe4, 0x3, "5e09316613b1dc599becb106e0208fc7fd29d472c5453d7e68f506e6eaf99b452d4faff2ed21060c00341437124078fb2511ae65b50f870301aefbcd3cdb816efc0a5fb262de0ac13e5e5d497e6966399a7a7a63e1aa895dbc3a9ea41ae0efa415fbb82d44c4b5bae8365203d9bdc17a48ac0bd297f63293fe17255396723705d2984114354b0a074daaa436594e9c57c926ea6e72149d0092cbbf3217345f82732f3e5089a3382c1eb0195c4c3e7543cbf1d443098a42e2af08b74aa47ec9b51a6816494abeeb466ce7e8b3b4dece169832534fb6a971f3f5b7877e6a0516986005"}}, {0x3c, &(0x7f0000000180)=@string={0x3c, 0x3, "a91b6f088f15a062207d0cf13abe7ac4d364c3404680d0b19dd5f92a47655d2e57b3fdad16850a60a4d8af1a0dbb878fb6d339259d2ede3c3612"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40e}}]})
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:16 executing program 4:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:57:16 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000400001100000008000e"], 0x1c}}, 0x0)

12:57:16 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2544.577383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2544.587756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
12:57:29 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x1300}, @void}}}, 0x1c}}, 0x0)

12:57:29 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8}], 0x60)

12:57:29 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x3, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:29 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffffff84c00000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:29 executing program 4:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r0 = dup(0xffffffffffffffff)
write$evdev(r0, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:57:29 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000800001100000008000e"], 0x1c}}, 0x0)

12:57:29 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0x3c9cc2, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:29 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x300, 0x1, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x24}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x8080)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000080)=0x7)
socket$inet_tcp(0x2, 0x1, 0x0)
read$rfkill(r2, &(0x7f0000000040), 0x8)

12:57:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x4, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:30 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000900001100000008000e"], 0x1c}}, 0x0)

12:57:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:57:39 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
dup(r0)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:57:39 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x5, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:39 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x25ccd54296dccee4, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x40402, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES16=r0, @ANYRES64=r2])
write$rfkill(r0, &(0x7f0000000040)={0x1, 0x7}, 0x8)

12:57:39 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x0, 0x8}], 0x48)

12:57:39 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x1400}, @void}}}, 0x1c}}, 0x0)

12:57:39 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000f00001100000008000e"], 0x1c}}, 0x0)

12:57:39 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:39 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
dup2(r0, r0)

12:57:40 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:40 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
dup(r0)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:57:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x1, 0x80, 0x40, 0x1, 0x1, 0x7f, 0x0, 0x6, 0x80020, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x1, @perf_config_ext={0x5, 0x5}, 0x8001, 0x4, 0x8, 0x4, 0x3f, 0x6, 0x7, 0x0, 0x3f, 0x0, 0x5})
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)

12:57:40 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {}], 0x48)

12:57:40 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x6, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000001c00001100000008000e"], 0x1c}}, 0x0)

12:57:40 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc011}, @void}}}, 0x1c}}, 0x0)

12:57:40 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
dup(r0)
write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}, {{0x0, 0x2710}, 0x2, 0x8001, 0x2}], 0xd8)

12:57:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x800)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x7, 0x101, 0x8001, "344c956edcd2fc"})
dup(r1)
r2 = signalfd4(r0, &(0x7f00000000c0)={[0x1]}, 0x8, 0x80800)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1, 0x6b, 0x56, 0x7, 0x0, 0xffffffffffffff7f, 0x8, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000280)}, 0x48401, 0xb, 0x14, 0x5, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)={0xc4, 0x3, 0x8000, "8e65c9d63e221757b1b01675c317de9ee77d66358cd3efe5d545d1610429a7f6cf781b5b0ef518b27f0129643e1f93f63d3bb65652aa6500a76ac19acc5057b82787abc5a99ef7e77519d4d6434221343e032b8e757dcce64d24636e973dfffe20873d9221ae95b44c5c353812a796aa3f50328da9205402f58ed4f3b71b8e9e53b08f5c41ec93399c5fa29fac52300205688df61939bee6123982593b966f08119b165bbd4dc59dea7f73380e3db2c04f7bc84074f5ea16ff6df5bafcaadf2202b6ff22"})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x24240, 0x0)
ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0)

12:57:40 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x3, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:40 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, 0x0, 0x0)

12:57:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000bb00001100000008000e"], 0x1c}}, 0x0)

12:57:49 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, 0x0, 0x0)

12:57:49 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77fdfa597732e87089d6491d4a19ff2f4a66646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00'])

12:57:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000f000001100000008000e"], 0x1c}}, 0x0)

12:57:49 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x7, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {}], 0x48)

12:57:49 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:49 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0xf}}, 0x0)

12:57:49 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
getpid()

[ 2577.505120] 9pnet_fd: Insufficient options for proto=fd
[ 2577.514326] 9pnet_fd: Insufficient options for proto=fd
12:57:49 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {}], 0x48)

12:57:49 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642c726664ed51ff4195976e6f3dd7a75d8ade52c013ebe4533a0d1a77412cc52b58d47a3d1ea1c90d1a86ec4a6f16309639d130235d50a87129d7abb8caad5f1a8856d6a117969ab8d49788ab32bf935f0d3d33b9", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

12:57:49 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0xf, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:57:49 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000009001100000008000e"], 0x1c}}, 0x0)

12:57:49 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x14}}, 0x0)

[ 2577.676450] 9pnet_fd: Insufficient options for proto=fd
12:57:49 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, 0x0, 0x0)

12:57:49 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x5, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:57:49 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x1b, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:58:00 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x180}}, 0x0)

12:58:00 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:58:00 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}, {{0x0, 0xea60}, 0x0, 0x3, 0xbbfe}], 0xc0)

12:58:00 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/fib_trie\x00')
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB=',\x00'])
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
pread64(r4, &(0x7f00000004c0)=""/83, 0x53, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}})
mount$9p_unix(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x1001000, &(0x7f0000000180)=ANY=[@ANYRES64=r2])
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000d31769cdf34644ae72609136ae2a87b6156def96771819db15e0e321ad63d8344956eec7b7050b3155a1d9b91e99e289b2e40525b613cb3c1444d146d50e26c425dcb8ba3e63966e91480f557ae1cbb9bae265b9eeebee7d2d639b5d478877615e8215b1d61c97b043ce49", @ANYRES16=r5, @ANYBLOB="01000000000000000000120000002000018008000100", @ANYRES32=r7, @ANYRESOCT=r0], 0x34}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@loopback, 0x50, r7})
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbf9, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r9 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x9, 0x9})

12:58:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x27, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:58:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c00e001100000008000e"], 0x1c}}, 0x0)

12:58:00 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{}, 0x0, 0x8}], 0x30)

12:58:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1b0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:58:00 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000000f001100000008000e"], 0x1c}}, 0x0)

[ 2588.167278] 9pnet_fd: Insufficient options for proto=fd
[ 2588.254309] 9pnet_fd: Insufficient options for proto=fd
[ 2588.980104] 9pnet_fd: Insufficient options for proto=fd
[ 2588.987202] 9pnet_fd: Insufficient options for proto=fd
12:58:11 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000001c001100000008000e"], 0x1c}}, 0x0)

12:58:11 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {}], 0x30)

12:58:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x120, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x800, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x20040061)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x305, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14048040}, 0x24000910)

12:58:11 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x7, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:58:11 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}, {{0x77359400}, 0x17, 0x9, 0x200}], 0xa8)

12:58:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0xfe, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:58:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x33fe0}}, 0x0)

12:58:11 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)={0xc00, 0x2, 0x8}, 0x18)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x58, 0x3, "e99f3ad6c8d3384e30c00ee02b9048b36cf00dc1d55f9d8a85a4d3b79cdc334abec54a605a2ed01ac86c5c93aba0294e8188dee7c12d0ce1fe14bc2a136a8408f64abb4bef99550733686d4803046cb03f941833"}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc04c0d0}, 0x20040891)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x501001, 0x0)
recvmmsg$unix(r0, &(0x7f0000002680)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/237, 0xed}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/230, 0xe6}, {&(0x7f0000000840)=""/167, 0xa7}], 0x4}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000ac0)=""/103, 0x67}, {&(0x7f0000000b40)=""/1, 0x1}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/103, 0x67}, {&(0x7f0000000c00)=""/250, 0xfa}, {&(0x7f0000000d00)=""/231, 0xe7}, {&(0x7f0000000e00)=""/134, 0x86}], 0x8, &(0x7f0000000f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001100)=""/99, 0x63}, {&(0x7f0000001180)=""/93, 0x5d}, {&(0x7f0000001200)=""/199, 0xc7}], 0x3}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002400)=""/43, 0x2b}, {&(0x7f0000002440)=""/187, 0xbb}, {&(0x7f0000002500)=""/41, 0x29}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000002640)}}], 0x6, 0x40012122, &(0x7f0000002800))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002880)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000002a80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000028c0)={0x174, r6, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x2004c014}, 0x4000000)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002640), 0x2, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0)

12:58:11 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {}], 0x30)

12:58:11 executing program 2:
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x100000000)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

[ 2599.708209] 9pnet_fd: Insufficient options for proto=fd
[ 2599.728622] 9pnet_fd: Insufficient options for proto=fd
12:58:11 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:58:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x3ef, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:58:11 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000bb001100000008000e"], 0x1c}}, 0x0)

12:58:11 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dac3fe9776b13468e0ccf2ce826db831161e947fdc084cd3256fc895ff73d80e7e51de2b201bc83f277c005f1a27a6ab408bed5479145d9a01c012d8a8d2066374c8b03f52b4987a354270f96f1386f9c8fe16345b41e167feaa06c165618a8103843dc296ca1166b2f574b6a78e686ed33d3da8e45ba1fd66208e111cfe48f3b29f22b9150751f9ae34626e31bbb0a9e848a02c1c27b93094326b061cfb93410861abe091c14aef97c0ae70f324a", @ANYRESHEX=r1, @ANYBLOB=',\x00'])

12:58:11 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {}], 0x30)

12:58:11 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x1000, 0xe7}, {&(0x7f0000001180)="82fcb76d7068268c1923a3fb1cfaa86b135e9d1e3a5dd3ca7999ee8e296be4a48a5de97950a8760d1cff9ccb67aa5a24a7095b09e40b5a03a7ccf609730306db1886a97d21081e9fe05f98bd0afe9fb41b2ece220f5e54b5e3c4beeae11ba58d83397e2ba3538e931520c6156a2d1fa414fe02546c162f030ddb2454b18cbbc52c75da94391a6e9d6f2b2d1f47b8759052fef405ecab7dfb248ef5e0aadb2f7acf7a5041252d4e7ea444788d72787aaadae6932166c90179423f04cbd4f1f4714df8ef28136639c3cff36f946d472f75a569abb8", 0xd4, 0x1}], 0x800490, &(0x7f0000001280)={[{@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_win95}], [{@appraise}, {@euid_gt={'euid>', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '[*{'}}, {@measure}, {@hash}, {@uid_gt={'uid>', 0xee00}}, {@subj_type={'subj_type', 0x3d, '/dev/rfkill\x00'}}]})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000001380)=0x1)

12:58:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0xfffffdef}}, 0x0)

12:58:11 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}, {{0x0, 0x2710}, 0x11, 0x8, 0x6}], 0x90)

[ 2599.895790] 9pnet_fd: Insufficient options for proto=fd
12:58:22 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0x500, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:58:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x0, 0x8}], 0x18)

12:58:22 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x9, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:58:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}, 0x2}, 0x0)

12:58:22 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x22c0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

12:58:22 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}, {{}, 0x0, 0x3, 0x4}], 0x78)

12:58:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000ec0001100000008000e"], 0x1c}}, 0x0)

12:58:22 executing program 5:
r0 = open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
dup2(r0, 0xffffffffffffffff)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x5)
setuid(r4)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=loose,seclabel,audit,uid<', @ANYRESDEC=r4, @ANYBLOB="80000000000000000000000000000000004ecf86e246de6db6a842213f3ff8394d8be62c99eefbca880b1194436a6405da00e3508cc6050a682d031583edf498f68e8c0f573638746a81e55d3d98889258b75b43e6a7196855efda0177c9084b0e71c8de3801828dae82c7eb06474cd00d6b87453333f2e839"])

12:58:22 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}, {{}, 0x0, 0x8, 0x80}], 0x60)

12:58:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{}], 0x18)

12:58:22 executing program 2:
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000002840)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xb018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0x94, 0x1a, 0x1, {0x22, 0x6ca}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x7, 0x3}}]}}}]}}]}}, &(0x7f00000039c0)={0xa, &(0x7f0000002b40)={0xa, 0x6, 0x0, 0x1, 0x4, 0xff, 0x0, 0x3}, 0x34, &(0x7f00000037c0)={0x5, 0xf, 0x34, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b1afaba33ec53873c069afb23d609ec7"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6385f3d94fae001f3466d5c1aa19a88c"}]}, 0x2, [{0xa8, &(0x7f0000003800)=@string={0xa8, 0x3, "b12deab171ff6f40b4d2a45193fb1e3735b3e4b7c8401fdad7a3b41c55a20d5713aa3e7fe62a99534e492793f62c0a3867e54f6b96d1c207eaaa47f73f365571e7c10f37530af61023dae1b450aa5a95a8c8698a626d91fdb46b24b7540a447c8652fc14a22a90a1476fab75397448bf462722be44631ef3965f8ab8d4d7fe8d6169164cc4150fe64728a87855efd7bbf39c75157d28566229b611623e797d19eee4bcab2126"}}, {0xce, &(0x7f00000038c0)=@string={0xce, 0x3, "1ffc1de00c02157e25c24bf8952e5ea2dd07d143c4d462493d9b92afd675897fd568b85e8f7906abcf4956a272e551774c54c8d9676dad937269721975e3930127c2435ceaae6d10c9c67052c43548ce7d25ddcec27fd02f68ecb35718586b76bc9e96bbc29ed030d94e41de6f78ad02f8d3913b45d98c913d4e1b29b5768ff4beb06211dde5d0fde23d99e1b7b63b56768bfe3b5b26f68ccefe59e31624bb59d4a2f853a468cd05bd5a54d64755a1b7634f1e61520bc81597fbefcec46a79188a917bb07aa1ad4523d3dd23"}}]})
pselect6(0xfffffe9a, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300), 0x8})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000003740)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000034c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/232, 0xe8}], 0x4}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/46, 0x2e}, {&(0x7f0000000680)=""/22, 0x16}], 0x4, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000e00)=[{&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/66, 0x42}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000b00)=""/151, 0x97}, {&(0x7f0000000bc0)=""/53, 0x35}, {&(0x7f0000000c00)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/146, 0x92}, {&(0x7f0000000d80)=""/84, 0x54}], 0xa, &(0x7f0000000ec0)}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/1, 0x1}, {&(0x7f0000000fc0)=""/179, 0xb3}, {&(0x7f0000001080)=""/97, 0x61}], 0x3}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001140)=""/137, 0x89}, {&(0x7f0000001200)=""/173, 0xad}, {&(0x7f00000012c0)=""/205, 0xcd}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/183, 0xb7}, {&(0x7f0000002480)=""/96, 0x60}, {&(0x7f0000002500)=""/213, 0xd5}], 0x7, &(0x7f0000002680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002800)=""/42, 0x2a}, {&(0x7f0000002840)}, {&(0x7f0000002880)=""/192, 0xc0}], 0x3, &(0x7f0000002980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000002ac0), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/114, 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/150, 0x96}], 0x1, &(0x7f0000002d40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002e40)=""/222, 0xde}, {&(0x7f0000002f40)=""/249, 0xf9}, {&(0x7f0000003040)=""/130, 0x82}, {&(0x7f0000003100)=""/39, 0x27}], 0x4, &(0x7f0000003180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f00000032c0)=""/142, 0x8e}, {&(0x7f0000003380)=""/164, 0xa4}], 0x2, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x40000010, &(0x7f0000003780)={r0, r1+60000000})
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xea)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0)

12:58:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}, 0x11}, 0x0)

12:58:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000f0001100000008000e"], 0x1c}}, 0x0)

12:58:22 executing program 5:
open(&(0x7f0000000240)='./mnt\x00', 0xc84c0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0xc3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
fcntl$notify(r0, 0x402, 0x10)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c0082404bacc7146beb45afa4fc6301e7b7703c6c9cab0e1742e9c6388a21cf05c4d52a4720f354991d0e72d252123cd50752bf62fec78e3e2424ff70acf455f230608ad1390399accc116e02e64a11833eecff95e94ec2e2c39d8bf214fac0d467ad72bcae6f9a1ad6ce51cad1b2b9510afb8f9a7e0d1b5e01405e08e8d9b408cd000cd526805ff2025971210885d5212f58d8266b707860169920b2019525f0807c7c12bfd346767dcfdbdc3d1cf2829f4cfc2ae1896d44b1cd269361dc161257d5980bf77e039bc9c169de0b0abf64c1def16eb68ea5f2385b15683ba1df5fabfa9e830ff51f99479da81b7486ac5896e87060a0c6c013ac1761ad4c76b5245fdff39fa344a2966f4e981895343faac9f6e8e480bb3e34b5a5b43a01a3155af5e2c078cc108a54804e1d195ff60ceeb235a56c18c9ce04792d03065b1609d3a32f7ff5fb9fdb382eaeb02f40b903f9985345164223d9abcaed3d677a6f86ec2a944a8dd0c90000000000000000004f5b5f9a80649236d33b3534acf243c3428cec8509f65a4ed64acf72230a51516f60fd6853ab5a1235e51f93dad9a7d0f1c093035ba39666da0998f837ebd892e9425e79b36185b441d9183767d88a1a085b1756e84fc5731f4be79946809a55476cd6b6737c7a246ac4f6ca5d488ca8ea0b0df5f2f351b938b961ed1a42ef644ffb04928d4c02e9333446ca31666a9f7057cca5649e48490eb3dc0049"])
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='loginuid\x00')
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}})
mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x400, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC=r8, @ANYBLOB="2c75666488173d67ff92028cf77c54d6a021dbcbee86d9e8aa98c05f57958209ddab2b12b2bd15db1facec1b3762da3f1862d2a8ba446c432df0ee2d1ea1aa4c64d60907ab64a88e4cbd9effcfa14a4f2500bd54b1aeb6d555c431dadcfce6dda04d6208aac292bd57f5fd43d80d9a430abb", @ANYRESHEX=r4, @ANYRES64=r8])

12:58:22 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000000180)="1d", 0xffd, 0x3}, {&(0x7f0000000200)="d9", 0x1, 0xfffffffffffeffff}, {0x0}], 0x10000, 0x0)

12:58:22 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{{}, 0x14, 0x0, 0xf8a}, {{0x77359400}, 0x15, 0xca18, 0x9}, {{}, 0x16, 0xfff8, 0x1}], 0x48)

12:58:22 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401)
r1 = dup(r0)
write$evdev(r1, &(0x7f0000000380)=[{}], 0x18)

12:58:22 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xa, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:58:22 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0xc00e}, @void}}}, 0x1c}, 0x74}, 0x0)


VM DIAGNOSIS:
13:03:32  Registers:
info registers vcpu 0
RAX=0000000000a34d69 RBX=0000000000000000 RCX=ffffffff84bb7167 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c6e94 RBP=dffffc0000000000 RSP=ffffffff85a07e00
R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001
R12=ffffffff8643d150 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84bb5e9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55da000 00000000 00000000
LDT=0000 ffffc90000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f97a5469010 CR3=000000001ea64000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=0000000000000000416f98da00000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000118e02d RBX=0000000000000001 RCX=ffffffff84bb7167 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c6e94 RBP=dffffc0000000000 RSP=ffff888009717e58
R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001
R12=ffffffff8643d150 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84bb5e9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56da000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0e3d71a650 CR3=000000001ea64000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=000006010129fae688fc0101039aff0f
XMM04=6d20636578650d006567616972742063 XMM05=6d7320636578650a00657a696d696e69
XMM06=00736465657320636578650a00687361 XMM07=72617473657220726f74756365786511
XMM08=6e6567206365786508006c61746f7420 XMM09=650d0065676169727420636578650b00
XMM10=78650a00657a696d696e696d20636578 XMM11=7320636578650a006873616d73206365
XMM12=7220726f747563657865110073646565 XMM13=75662063657865090073747261747365
XMM14=616469646e616320636578650e007a7a XMM15=000073746e696820636578650a006574