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", 0xfe9, 0x0, &(0x7f0000001040)="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"/4073}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x800, 0x4) r3 = getpid() pidfd_open(r3, 0x0) tgkill(r3, 0x0, 0xd) r4 = clone3(&(0x7f0000000580)={0x10101000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x13}, &(0x7f0000000400)=""/144, 0x90, &(0x7f00000004c0)=""/112, &(0x7f0000000540)=[0x0, r3, 0x0, r3, r1, r1, r1], 0x7, {r0}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) r5 = getpid() pidfd_open(r5, 0x0) r6 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=0x0) r8 = getpid() pidfd_open(r8, 0x0) clone3(&(0x7f0000000700)={0x1018000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x29}, &(0x7f0000000140)=""/13, 0xd, &(0x7f0000000180)=""/40, &(0x7f00000006c0)=[r4, 0x0, r3, r6, r7, 0x0], 0x6, {r0}}, 0x58) fork() 23:18:54 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) r8 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd^o=', @ANYRESHEX=r8, @ANYBLOB="9a951d85"]) splice(r4, &(0x7f00000000c0)=0x9, r1, &(0x7f0000000100)=0x802f, 0x200, 0x3) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) pidfd_open(r5, 0x0) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:19:05 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = getuid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4ab1, 0x6, &(0x7f0000000580)=[{&(0x7f0000000240)="5e4fdb93a255690630b01af754e01bc97a46347f72a9bb5e77ae344574f02d332830144d97f2c24995037110b4fe335488a1dd39679b76895a23fc27a3dfed1b361964fef129e9c1d052f6967fb7fc09828c0afbf68464ea69cd3fd27de7191db99bcff4656e769406cfee4a6bf17ebc0f904112daad918d13b9864af28a5507720efa0f96a0dea68755bf087cbc8da5026eeb78abf850fac9c788c6c9554ddc5c97d674f65342f1cf332b7e97f841710c5e650f254a910167b0c04723d318407841f95e78989c9acd5b51834937e3da005b687a064913624434e45043b2151cfe4efcae94056726f60dc0", 0xeb, 0x400}, {&(0x7f0000000340)="929b1d74f34eb59f4a5c9bbb584ed807b37f35d54928ad7e95a15e0abf558a6a65676f7f5454cda74ad7f23730d5fc20d716f007d925be769e21ae14e72943c3d61485f48954914277daf9518ea91011deda48e282c02ea74cd31bf333ca4fdd9f991e0b964960ccb3e87dd24cd2c85d7b24f1bc0cd2204d8ceb68e5bcd1112c6cfca170a720425d81054cb8a3a6c8023445e42ef4a1bb39aa4d83c56a7fd3894a5a096caecb0a88de1509d362500fce3da659947f120904b36254e20c7959e1c0284ebf307fb7ac6df342109c2de11bd6d2d43f8d2eeb84e17a306cdc1c2435cb57d3e6853475ec1508f3e727fecf5b7ccdb46f600bc0dab6", 0xf9, 0x3e}, {&(0x7f0000000180)}, {&(0x7f0000000440)="f4c1399ce4b2d5ba1150fd4d741dae75aaf5a30a584fbd05dffb2b6ce9dafdf1b615be5c243ed9863f2463e2acb7", 0x2e, 0x6}, {&(0x7f0000000480)="60d4d5b6fa29b4cc9da8b2266829b4556cebf15df14942a7676e96ac0e8e91a6f1cd7398ce1ffdeb12aa6561bf79420f5df233099f4fbcb140", 0x39, 0x8}, {&(0x7f00000004c0)="513b063683686b4018943dba1f9015d01fa91e2f4637731831f75cb559d55a80e02f9dabce3f52f1c85f199768b9decf7dc5b2341cdabea461893fda1f8c5f6c4b0553a191c261bfe486ebcc7f0e7ddb6dbf4f37bd558e1fca239debb052a0de3fbbc86760e7f91379dd0e3682a37ad72cbad5a9fd5b3c453df2a8a3aef5551376", 0x81, 0x8}], 0x1932000, &(0x7f0000000640)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}], [{@uid_gt={'uid>', r0}}, {@uid_gt={'uid>', 0xee01}}]}) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') ioprio_set$uid(0x3, r0, 0x2007) 23:19:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:19:05 executing program 7: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = accept4(r0, &(0x7f0000000200)=@can, &(0x7f0000000180)=0x80, 0x80000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) dup2(r4, r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x43}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20004000) sendfile(r3, r1, 0x0, 0xfdef) ftruncate(r2, 0xffff) 23:19:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x81, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f003156000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040", 0x1f, 0x4df}, {&(0x7f0000000080)="0300000004000019", 0x8, 0x800}], 0x828000, &(0x7f0000000040)=ANY=[@ANYBLOB="e6"]) 23:19:05 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x5) 23:19:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) r8 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd^o=', @ANYRESHEX=r8, @ANYBLOB="9a951d85"]) splice(r4, &(0x7f00000000c0)=0x9, r1, &(0x7f0000000100)=0x802f, 0x200, 0x3) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) pidfd_open(r5, 0x0) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:19:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x14) r2 = getpgrp(0xffffffffffffffff) r3 = getpid() pidfd_open(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) kcmp(0x0, r3, 0x5, r4, r1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3d1eaad07562d4be84cd891a8cd27fc85f53b26b5890f6d3d6fa8d3f0b596aa0fda3a66a5781a1d27708d2578e65ac1fb97a860ae2c4983877e368e70d17", @ANYRESHEX=r7, @ANYBLOB=',\x00']) r8 = accept4$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0x1c, 0xc00) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r0, r0, r9], 0x3) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x50, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, r10, "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", "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"}) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, 0x0) 23:19:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x7, 0x1f, 0x20, 0x0, 0x9, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7fffffff, 0x2}, 0x0, 0x6, 0x2, 0x7, 0x9, 0x80000001, 0xfb47, 0x0, 0x6, 0x0, 0x4}, r2, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x9e, 0x3f, 0x40, 0x0, 0x80000001, 0x1900, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x103, 0xfffffffffffffffe, 0x6be1, 0x1, 0x9, 0x4, 0xa8f, 0x0, 0x8, 0x0, 0xffffffff}, r2, 0x10, r4, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000140)='net/netstat\x00') r6 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r6}}, './file0\x00'}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x0, &(0x7f0000000100), 0x4723, 0x4) [ 341.155215] hugetlbfs: Unknown parameter './file0' 23:19:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$tcp_mem(r0, &(0x7f0000000040)={0x100000000000000, 0x20, 0xfffffffffffffffe}, 0x48) [ 341.172489] loop6: detected capacity change from 0 to 8 [ 341.188143] loop6: detected capacity change from 0 to 8 23:19:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x8c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040005}, 0x4040001) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$CDROM_SEND_PACKET(r4, 0x5393, &(0x7f0000000240)={"5c59512cb03beb1343354bf3", &(0x7f0000000140)="d29a67795c08da089945e50556c90aaed238512fdf5f3af2f813d312dd8b34948d0dcbe6cf68f22138aa5cdcc4f12196c3e159341ef5905413f276ccde147d11a65a2b88e0ef2307f4d8f557207a29e02fe4004ae46541d23809a0d842e96b1df18e3b4a54b7ff0b0f31f7f10d585f27563f6c", 0x73, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x60, 0x3, 0x0, 0x0, 0x0, "6dc8e6e3", 0x1, "624aadc7", 0x5d, 0x9, 0xff, "ea751e", "4e52de78d88936e467fe5885d413a08cd8bdc26ce38a693e4bf46e322620a15de53e4ed151ed49e9ddc7cd3e2ba9"}, 0x3, 0xe8000000, 0x400, &(0x7f0000000200)}) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="fa", 0x1, 0x600}]) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000000)=0x5) read(r4, &(0x7f00000000c0)=""/113, 0x71) [ 341.250563] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 341.252296] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 341.253503] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 341.254567] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 341.255743] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 23:19:05 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000600)=0x14) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x19c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000014) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r11, @ANYBLOB="0b07000000000000000001000000080001000000000008000300", @ANYRES32=r12, @ANYBLOB], 0x24}}, 0x0) 23:19:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x3, {{0x2, 0x4e20, @loopback}}}, 0x88) pread64(r0, &(0x7f00000000c0)=""/163, 0xa3, 0x0) [ 341.327553] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 341.329088] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 341.330195] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 341.331271] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 341.332458] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 341.333736] buffer_io_error: 734 callbacks suppressed [ 341.333765] Buffer I/O error on dev sr0, logical block 0, async page read [ 341.335748] Buffer I/O error on dev sr0, logical block 1, async page read [ 341.336916] Buffer I/O error on dev sr0, logical block 2, async page read [ 341.338086] Buffer I/O error on dev sr0, logical block 3, async page read [ 341.339227] Buffer I/O error on dev sr0, logical block 4, async page read [ 341.340373] Buffer I/O error on dev sr0, logical block 5, async page read [ 341.341519] Buffer I/O error on dev sr0, logical block 6, async page read [ 341.342675] Buffer I/O error on dev sr0, logical block 7, async page read [ 341.344202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.344826] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.345463] Buffer I/O error on dev sr0, logical block 0, async page read [ 341.356877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.357335] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.358118] Buffer I/O error on dev sr0, logical block 1, async page read [ 341.364492] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 341.369425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.370069] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 23:19:05 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x5) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) fchown(r0, r2, 0xee00) lsetxattr$security_evm(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000780)=ANY=[], 0xa6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x8000, 0x6, 0x7, 0x2}, {0x2, 0x6, 0xa2, 0x3ff}, {0x4, 0x3, 0x1, 0x9}, {0xf92, 0x1f, 0x8, 0x1}, {0x3, 0x0, 0x44, 0x8}, {0x7, 0x3f, 0x5, 0x3}, {0x13, 0x9a, 0xbd, 0x68000000}]}) 23:19:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[], 0x23) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = getpid() pidfd_open(r4, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r4, 0x2, r0, 0x8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000002c0)) r6 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfd^o=', @ANYRESHEX=r6, @ANYBLOB="9a951d85"]) splice(r2, &(0x7f00000000c0)=0x9, r0, &(0x7f0000000100)=0x802f, 0x200, 0x3) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r1, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) pidfd_open(r3, 0x0) [ 341.396430] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 341.400894] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 341.405418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.406019] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.416335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.416808] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.422432] mac80211_hwsim hwsim4 wlan1: left promiscuous mode 23:19:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4e0b, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r2 = getpid() wait4(r2, 0x0, 0x80000000, &(0x7f0000000300)) r3 = fork() r4 = clone3(&(0x7f0000003cc0)={0x1108800, &(0x7f0000002b00), &(0x7f0000003e00), &(0x7f0000002c80), {0xb}, &(0x7f0000002bc0)=""/169, 0xa9, &(0x7f0000003e40)=""/4096, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, r2, 0x0, 0x0, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa, {r1}}, 0x58) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r5, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000400)=0x80000000) syz_io_uring_submit(r6, 0x0, 0xfffffffffffffffe, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000480)=@in={0x2, 0x4e22, @broadcast}}, 0xfffffffe) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r7, 0x125d, 0x0) clone3(&(0x7f0000003d80)={0xb080000, &(0x7f0000000440), &(0x7f0000000500), &(0x7f00000017c0), {0x1c}, &(0x7f0000002940)=""/166, 0xa6, &(0x7f0000002a00)=""/220, &(0x7f0000003d40)=[0x0, r2, 0xffffffffffffffff, r4], 0x4, {r7}}, 0x58) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000240)={0x40082080, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x2e}, &(0x7f0000000140)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1, {r1}}, 0x58) [ 341.436876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.437319] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.450524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.450983] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 341.473507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.474848] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 23:19:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'netdevsim0\x00', {0x1}, 0x6}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x2, 0x18}, './cgroup/cgroup.procs\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x2d, 0x80, 0xd6, 0x9, 0x49, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x99, 0x40, 0x101, 0x1}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @broadcast}, &(0x7f0000000080)=0xc) fcntl$setstatus(r3, 0x4, 0xc00) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x0) [ 341.499105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 23:19:05 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe7, 0x7, 0xe2, 0x3, 0x0, 0x7fffffff, 0x80004, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x40004, 0x80000001, 0x9, 0x3, 0xffffffff, 0x6, 0x6, 0x0, 0x3, 0x0, 0x4}, r1, 0x9, r0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 341.510752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.512267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.513734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.515786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.517313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.522747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.542042] autofs4:pid:5118:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189375) [ 341.542971] autofs4:pid:5118:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 341.549923] autofs4:pid:5118:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189375) [ 341.550924] autofs4:pid:5118:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 23:19:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[], 0x23) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = getpid() pidfd_open(r4, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r4, 0x2, r0, 0x8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000002c0)) r6 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfd^o=', @ANYRESHEX=r6, @ANYBLOB="9a951d85"]) splice(r2, &(0x7f00000000c0)=0x9, r0, &(0x7f0000000100)=0x802f, 0x200, 0x3) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r1, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) pidfd_open(r3, 0x0) 23:19:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:19:14 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc9468e6d8e2482a1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) 23:19:14 executing program 4: openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xeb) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0xc0081, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000900)="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", 0x1ba) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r0, r2, 0x0, 0xfdef) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = getpid() r8 = pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r3, r8, 0x28d}) 23:19:14 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:19:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x8, 0x50bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20044984) socketpair(0x0, 0x0, 0x0, &(0x7f0000000380)) r5 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0xd, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x24000808) 23:19:14 executing program 7: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x76301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'vcan0\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454e2, &(0x7f00000000c0)) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) 23:19:14 executing program 2: sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x8001) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) recvmmsg(r1, &(0x7f0000004f00)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/192, 0xc0}, {&(0x7f0000001580)=""/55, 0x37}, {&(0x7f00000015c0)=""/37, 0x25}], 0x4, &(0x7f0000001640)=""/243, 0xf3}, 0xffffff81}, {{&(0x7f0000001740)=@alg, 0x80, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/79, 0x4f}, {&(0x7f0000001840)=""/201, 0xc9}, {&(0x7f0000001940)=""/2, 0x2}, {&(0x7f0000001980)=""/152, 0x98}, {&(0x7f0000001a40)=""/183, 0xb7}, {&(0x7f0000001b00)=""/92, 0x5c}], 0x6, &(0x7f0000001c00)=""/235, 0xeb}, 0x100}, {{&(0x7f0000001d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/197, 0xc5}], 0x1, &(0x7f0000001ec0)=""/235, 0xeb}, 0x5}, {{&(0x7f0000001fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002040)=""/210, 0xd2}, {&(0x7f0000002140)=""/170, 0xaa}, {&(0x7f0000002200)=""/132, 0x84}, {&(0x7f00000022c0)=""/233, 0xe9}, {&(0x7f00000023c0)=""/74, 0x4a}, {&(0x7f0000002440)=""/32, 0x20}, {&(0x7f0000002480)=""/198, 0xc6}, {&(0x7f0000002580)=""/125, 0x7d}], 0x8}, 0xffffffe1}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002680)=""/26, 0x1a}, {&(0x7f00000026c0)=""/251, 0xfb}], 0x2, &(0x7f0000002800)=""/61, 0x3d}}, {{&(0x7f0000002840), 0x80, &(0x7f0000003a40)=[{&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/18, 0x12}, {&(0x7f0000003940)=""/204, 0xcc}], 0x4, &(0x7f0000003a80)=""/4096, 0x1000}, 0xd136}, {{&(0x7f0000004a80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/2, 0x2}], 0x1, &(0x7f0000004b80)=""/197, 0xc5}, 0x1}, {{&(0x7f0000004c80)=@ax25={{}, [@default, @rose, @netrom, @netrom, @remote, @remote, @default]}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d00)}, {&(0x7f0000004d40)=""/66, 0x42}, {&(0x7f0000004dc0)=""/63, 0x3f}, {&(0x7f0000004e00)=""/47, 0x2f}], 0x4, &(0x7f0000004e80)=""/101, 0x65}, 0x800}], 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',czche=none,\x00']) 23:19:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$AUDIT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3e9, 0x100, 0x70bd29, 0x25dfdbfc, {0x22, 0x1, 0x1, r3, 0x7, 0x9, 0x8001, 0x4, 0x0, 0x3}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x40004) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb5890666bb79b1b918850aff96174", 0xf}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)=ANY=[]) 23:19:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000100)=@random={'user.', 'net_prio.prioidx\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x2) syz_read_part_table(0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000000)='v', 0x1}, {0x0, 0x0, 0x1000}]) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) [ 350.931335] loop5: detected capacity change from 0 to 16 [ 350.956183] loop5: detected capacity change from 0 to 16 23:19:14 executing program 5: syz_read_part_table(0x40000000, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}]) 23:19:14 executing program 6: mknod$loop(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000340)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x6000000) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x101, 0x620280) sendfile(r1, r0, 0x0, 0x68e146a1) lgetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='user.incfs.size\x00', 0x0, 0x0) 23:19:14 executing program 2: syz_read_part_table(0x9, 0x2, &(0x7f0000000440)=[{&(0x7f0000000000)='\x00', 0x1, 0x6}, {&(0x7f00000000c0)="199d670d771a38fd6f0ff0b147797654ec4130b8ec7520d23b8c6eb26acb2f52f38399604906ab7e2318263f46acb1e460bc6a7c3a16291576d9623aee5aa0f5e4c74d591b919a250d3191f5dd86f00f96699f0ef1a5a77a", 0x58, 0x1000}]) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="5e92f430974326ea5289bd2b65c0a1070ee2d0068e2a", 0x16, 0x80}]) 23:19:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[], 0x23) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = getpid() pidfd_open(r4, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r4, 0x2, r0, 0x8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000002c0)) r6 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfd^o=', @ANYRESHEX=r6, @ANYBLOB="9a951d85"]) splice(r2, &(0x7f00000000c0)=0x9, r0, &(0x7f0000000100)=0x802f, 0x200, 0x3) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r1, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) pidfd_open(r3, 0x0) [ 351.048152] loop5: detected capacity change from 0 to 264192 23:19:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7635}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14004}, 0x440c0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) [ 351.078118] loop5: detected capacity change from 0 to 264192 23:19:15 executing program 5: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0xbc1c, 0x3, 0x100]}, &(0x7f0000000100)=0x44) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 23:19:15 executing program 3: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x36, 0x2d, 0x2c, 0x3a]}}}}]}) [ 351.179777] tmpfs: Unknown parameter './file0' 23:19:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) r8 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd^o=', @ANYRESHEX=r8, @ANYBLOB="9a951d85"]) splice(r4, &(0x7f00000000c0)=0x9, r1, &(0x7f0000000100)=0x802f, 0x200, 0x3) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) [ 351.281627] tmpfs: Bad value for 'mpol' [ 351.283387] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 351.285554] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 351.291519] tmpfs: Bad value for 'mpol' [ 351.508175] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 351.517477] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:19:25 executing program 3: syz_read_part_table(0x9, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}]) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, 0x4, &(0x7f0000000180)=[{&(0x7f0000000480)="9e84ba596b090e1dd135beda7dbff6f0718eff2550c08ad2070f8e99aea7108ec03ee7915f60cb811a43c52414267b7d6876a5967d2f8b9aa5171255dfe58607956170c7939179ad45b80b47e3921f3a31e097559696b168de33672a39f637f8c737b4fca073fa6cccbd73bc16eab9fdad4a2a28032b30eee7cfc83d82ba0be35f70d811bc4011cab103cca969623d3b37740fc5f8b8acfa7d12850ed0fe433d0595fd1dbac021fab65ee4ddfa091cd9e22d1568861d1d5f716207b23fe2ac6be818d5881fed7ce739dbe04b958c7c5a5fc015c6cd59256b5b26ba36e71ef1ae166af7dd5d0b65d5c00cfd813c58cf78b3645452ad9295a1729ecc000e387d62127c4acc344dce115f84a3ea33c8c0bef2ab65228dcfc90ebc5555774b35d36b4aeb388b000746fae4f259b35bb3a26d54246c2d9bba3ee5602f474cedb2e4d9fa504f4914bd37f3307fbcd62ea2a1292075c732bbe3c6dc71346d61354a12e64f33782a00db644ad9d9ca3945a39e9c7e39a7a92df9c9d8fe6ab01552117e960a24fc2db5c65cb9b34a4a05defe7d33760213db49dde4c846fcdbaa682419ac2d3661f5b098e044110f51258521bf73feaa86faf6399324147ae70fad2590d45ef3be555b128bb493f2d361c739178c50bc33e4e1526da3d4c56bdc15350ca8722beb81fb9ae05c8e158f93f6fbfeac97bf9c58d629c39371bc8305b7265c8c79637f079cd72d0cb371ec8e88b1dc20ad698d6d537a8ab76db30ad55f15eb38186794c12116abae3c16ee605d1f88283a0485afed7c3bf0898324db6f5e6f7e888b48ee8c79245569d07d2f5bd0a476ef3402669b3db6892af41269d442c53faddacf333cc9009712300eea202c3a83754e59c9eb8bae6c5a687278e155325eda65ca070af97ae31bc48ec53ccd8ee60dafbb7a5d406102d1c6a029ea65061394e7caa76cc38a2a815144be3d885e4b8dc48cf88b6100be7779398b1cbd1986abb2a7266df0a660e18836fefa66233d1f881cc2818b0072835c30561bd31c77fd29ceef24f31d1fa6a06fd43f5370441d82f0e33aa8955e6e13245f923a38044295dd5718f8237af256997d0fd4ff3fb98fcb0624ba379e6eba232b71341dc43883f2ad5ad061c3934effa061db6f4bf82d2d611b478206d5f64cd57e4ecd9f9332e2e2bb5251fbfc860461333ed723e2ddddf681211a96f335d08c68d832b6f33a0136b3694e150ecdde45329401b8ea13fd5c0206d8bced68a75920f497846fadd95ad13185925eb31cce2c83c38683479366c148dedb1263117c7720a789365df9d038943491818d9ccfcb8c8e26895b19858a339ffc5eeeb279094f6fae7e06ef8dd3f0acda9842b37e2eba5998bf535cd52037c9a5ca929d890f78fd2d621bb5d289dd45b4bdce620f5599069379100418cc09bc631b814bd8f859ff9e7b7e77a07b1aeda76dbf39a98151ae36afc98fd491ac1d37f4d96647a29fa85e3378e42718af6ecb91421beb6588c16d816b67d4ffc8733688fe2a14d56e84e276e3ae29fcfba3101c648a43d17dfb655e2f8ab90b7fe5c3b87f8cbc8790ca518662e47aceae2dcd07dfc4583e44f8e02080a754b03e21bcc919a33e5a1ecd191f7ed41f73aeb415d3dcc80479a91cd289f55cc6d60c210f16828e8b2d9c024b11cc361fdfe69d48ab90936c4c1b9796be38c3940dee1e5f8694f7711191cb3c00588e554f8acab22c6cd9d3a543d3e4fcd8d0da18815c06430bba94d4601934fe8a5a66ce9a1ae56a5857d9579d5f0add1d961212eadf167a5df84d745bac9b7a44b771db57333db4603f886057a48d62077603027cd96520a64b55669bd859e857f0fdc4370cfec02bd860aec5dcc7e64f3b65b31922f128c19937be82ffbf964f5b8cc71de81ad6f7d36a6745b3a16467c7e8d29259112440c41d7e09823efa3b86a3b12ff9d71a52fd9b9087cf84e052680834054d9c882a0b358d5b093163132e02251201b40ac8b90519ca69c6464de0ef66f5b58a0c20b246534648af046bd8181928081e961be3c2c905c0e428efc2b741f97c907e7c1dfb457fd28ad1bf6f77fe5b042c2c65d929061249b64ffeb5915b2747b81ad3c5fac73dc84291d632a10c9e14baba5fdae71897e69d7b92f01caeac762c497bd4cffafe279667d6edcea7477c61a4172cc3d9038135f794c942a47b53912c67d948d8cf05239352944af3ae5771a7d3257910c03398ac442c10358eddd6905db4e7d9abf33fe39c21c543f8cddfc08ad1eed0c51579d09a6828958380049b22cfcbc367e42e20db084203c03ac7d15eea456f2c4032078a10174fce66edb18099a03b38e502fdc57981b7a2d0dfdfa41571be4ec88a9ccbe82ecb98488ab335dd8e739eace0aaf577ddeb0905d1ee976483c44faca7de8f24e497feebc09d23d76a52945646470c6990656ec7847042d55b3f3e5ff30b78141fb51f17ce46d0a33448d32b6935241d2840103d1b94e2d83fa3e40f5238ee9d08ad2eae2b3c48ea08831ae3f869b1b1cf024bf522bddce821eb9195e5cf2b6bfbbdc5a603f59b883e55a53f828e86e919cd6e2d80fe053b7e8cabb402fb632dadcb4fb49a7d6268fada2af4322207aafbab4f73472fe8370b8539b5d05c79af34af230f483db8d7454a7c6090bd880c4380c9c13564dbab302367f4463696df0abfdd255b6e1cb351e047852889f888d54f5ccd261989e147651800cc52392b2c9bda94f9a178dbd4f3bd0d5fdaf857af4bb3b21f81869f45d4273f114871de496f451b2a12b2b4e28c468da7e36533d61390d605129bbe67f222193699b0159d96b30b4faf7c7863b6496fc307397b3931b7d42296ffd5bdffb19a72b61514841df59a493b46292b85ec9314be1006b631b64c4446200bb40d43ff0be82c68f2c97fdc739fdad72da0bd1c66a53ea26956c1f2d368cfc58f509e5b8f814318454014274853c4ff02bb55ee45d92d05394ce0096ffa574a8192c1c76fc4132359a8227cbdc304b7320aacd01da74a48567c2c84b35f6a7cb148ccb2582587cab0bed45bed9d3d248300288a8899cbe1d2b8164ecd2e9496c41214df326db609bd632d325e84cd70bbf25957e46873fe6e2468ba54837267ab990937ddf94221ed33ccb74e42515263adb8555fed50b4e109aa0ced88fdf8230ecc789432f37d83a5797d8786ac3bfaa0d72516fb1231cd406792eaf4c5ed36b17fd40c8eef6846d27a418757748e495bab9244672df3008e23c789e0a0c9ed7b329472a3e3f49db51c77ea671d8b5e49638a461851bdce6191044cb67436176c00b127dfb95e58896e8f38a30c030d627c0890b49f6b58557e30bb2a2c03a3e7cba826347736b367fa0b46b8e55fce9b75b9312176e326a49d443999ab26a2c39f929f481245051c222f794fe8a9d156884e41de0ea0971fec5459f3d8bcb12fb42b86ebc678ad216db1cc30978e70ee0646023a18b1b40dd7746246bbd9f6f5a829b45e17a8ad9133b0f80c5bb7b228fa9af5650585a2b6f5011c2aed8175cba1ff8bf6cc5a74be2f057a093c4ed86a94f5028dbbc8ccdf73a0971068f3a112a1a3774f263fcca7d4603363cf99e0f4bfdeae05e59fb3fa849ac30ef7b963709bbddab646776345a94dd93c9582563408da77d7d7b9072e8b228a8526857d81629924f72def53826de1b3c92ed8ec60dbc3b8615af3900f5e91263879c902bffdeebfa6c823894ef0c76c01545889907adf66363b2e6769b43e5267c39a6c119b80a25d8a69ada58010e31371d9c660df0538ddeb7c9cc70ff597491577f970b218cf84f654e1ac4634a81df3db77071dfa04b3f000c48d2bdcab237a182032b6760b155e7159d689943867feeee3a3c5c5d1fea66e24d915e71062880c007edb52bf7c30b6447611e29f594f71829e55299856d89e138a0dfd340ea00060ed4ac763b996792cfa12d124648123e6fa69860ceb4d9463356129e4a5cb7b33e92b9dd8f127d2d380b1d3dc15605b671bc6fbaa2b6a28810d5296d5d734b89022ad9d0c6b545a5f81ac13a936c0212655a679953628fa30ba1557d579b6658a6c34e851a8c9a1c50a51e6e99ac7c325ae524156ed9ac8b1ac1579a80ccb41d3bb24ec83492bd9e384e19ea670f222e3d09ce299f41a58ca3ea9cdc7584a8845c71107e5f13b43060b574899a44c22da767843cc6ef04fa95fdc015fd42096c243af432f7ceaa367be997294918348b495ece79781f98416f71bc32de38da0b18335640ee444ac8b47098f37f80b5a6289cc1c31ce1dc7d530cb6ad6771500a037c9dc155ecf85c0803cd92ecb9d11ef67334d017b6a4b86036f7518e03e77188f241ee42393fb2697e659353f5d7da42e832003de77c989c881cdfec996d526081a51f27785dee7b112cda012250d232518af2ac834213ad2224324112a6133c8f91dc8bb75f5a1041b48bba5139759494ae3ed37477d9b4aa414f4e0542a33c06c2df79c64fd0e5bf9efb63e8e2176db959cc35a0332076fa76b24cdf570a34669c0d9c6e36dda381f5d96f53036e9218aca683fe5cb53649c7d80126d4fe2d76437ea95927a9d9a274803b32caa263c22157a6aaa510d1cfdebd9582bf05a50168e4421eaa62a9707fed79ebc540191886d42f960e0739a3da0d84c7005ca14a19ca12822fe731b647388c9528d07bd31ce8f065e9413ec5de8fda8e4bd43a5dd3e635fedc4211097a7dc16ce211ade54f51c8b92b8d53c7ff6bcbe4b5efb7f81439d3394bb409aab20274d3a19737c32b3a8ca159869f4af46dc401386fa6eec7b68c041601c4ca446a8a635115c9d4e05081650d92b022dffee8620468185e722d4140a1afd4d1d8129543bbb45f9bc165862c5e60a61f2cfc6eaf61f442378a20718b562b4b38350a2e4ee1cc549bffef702c01428ef8ff4d64d5bbaa21e09dc7232e1aad6a44a851847d593fe3419bb24845e4426b314d055cef5ff654b29a55fa5448ed6eebaa45ccb7a0ec0f732af825e7ab5e4d465cf572127011b13996e5f7e3c66eccae2d645256f4a7b43586e0b9278cc5e501dc348a95f15d0b701614b7aaac653ad5ef27981f199532f8c75c05ce403bb3dd3c58a6ab780a4504263d960371dffdecbb6efc819aee7c89bb211bafa69ec0b0581983d4ddb503d5848127850d619a6cedd12795103ee2dbbedf7d30bc7638bc2bc27e61d4ea080bb32299c127771115c633e4c03c47405a6ea014cde93e27f1b1b4bc02962c4604bae8ddd41ac971c2e93e2ecf81a455cd3a36a3c3aef35d6f6a761cc4621e4be6788ba6df8621844384a99eae4b504ed01f713baaf7cf47bb93e666d7209546a62115889816da020a2ca0ee3f06bdbfbe7ed0062d84bfd7d59df71513b1e552ab80c7566cc55ed0332fcc488571122a6dd01ad454a90cb894863e9b2755222e07a42049e0c15668699207774538652f3cc7bccf5cbb8e35098374ba5714cea69bdd197aa020f9bc33caa6347beb8122dbe855c3a41abb83c7fa4035fcde3c389653ddb33b96e85517f8e4aebca5598820ce84e710c63c2778ecc86f63795a8cc6c1f4de4982dd8fb329ed3f608382cf576d8bebb55e8b3f10818228aaaff43f548441e95081e2e8ea0426986da9ddef714f479a376aba146620bd4f572f28831d83c64ab9c563cd91d9e4d97dea3bf32c36f9f0b472365464327d0ba30663aeb10d60b1dd4acc912fce392a229b7031081ba731d6f8bce93f069b50503358e549eef06b5c48cff80cdfcc35f6e01671429af0e", 0x1000, 0x7ff}, {&(0x7f0000000080)="43fa2f2c8250338eef21341513090000000000009c9fc662e232c97b56eeef6c", 0x20, 0x3}, {&(0x7f0000001480)="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", 0x1000, 0x4}, {&(0x7f00000000c0)="f9a73c6cb5b464354de54ffe1a7edbd883c8ce9ff92778492db461fa1864d270de038a514941c5c837ca0e6f0284f33abc5540352d838308410f27d3a458910aa7b5ea369fd4d761ad4f2acbdc811a42f5c961284fa8652a7084ebd74e703cb5fd6b9a43de5c65ed56e19062a25a8b7ae06c2193b18bc7ff5c67cebdd3a571faee428b3801f712ebf9638e619866b2c4c84282175de854a48c53059f4e", 0x9d}], 0x2000, &(0x7f0000000200)=ANY=[@ANYBLOB="646f74732c646f733178666c6f7070792c6e6f646f74732c636865636b3d72656c617865642c68610d87e886c8527c69e173636c6162656c2c736d61636b6673726f6f743d262c646f6e745f6d656173"]) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7ff, 0x853abc90a7b12880) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)={0x7a, 0x6, 0x80000001, "6a171a9280a3312ba92e76feed3813821fb37187a22869e53015a64f716529b85dee8b76ab0ee132132c7cb41446e069adbdcce167a294c21bb4543005632542089a53c8178c45ad234b844dd9c42ebebdb4dacf30401a6e0878727866b6895413f776c55b74f872d83ba28ebe4551fe578f8139b80fbfe84bb3"}) r3 = dup2(r0, r1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r3, 0x0) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe, 0x0) syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x4, 0x9, &(0x7f00000026c0)=[{&(0x7f0000002b00)="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", 0x1000, 0x2}, {&(0x7f0000003b00)="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", 0x1000, 0x1}, {&(0x7f0000002480)="9e3806e2aab922f21bf027721fdc4fb4d882b21afa070c077b5d6ad4200a0f8365af5e9ae349951459565ae5760d82e954120043b104f048d58fd3cb5af69eefc6aa4e9ef5fc325a2731df4ceee95ce382df6bee90a04e053213907b7c81ac09d81cfd2a87db379153b077e2018d29eda4d110e69f6bd1e850cbefca64895d3166bd128861d3e82f8fe5c25baff7556564b74211e8ed62954f85", 0x9a, 0xd05a}, {&(0x7f0000000400)="74c7252e8052f3ff55aa4931705b4663c02371c3da8825230341d0799b6897235ac943ee2e92a1a11fa539ed21caef", 0x2f, 0x20}, {&(0x7f0000004b00)="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", 0x1000, 0x1000}, {&(0x7f0000002540), 0x0, 0x958}, {&(0x7f0000002580)="eaff22b935", 0x5}, {&(0x7f00000025c0)="efe7586193ff99c66bec2392aa83c6592fdf281dd264a052060999083f070d4324d915f50f9489e526392ec1316c2750f413c3f39bec0229d6ad06d4a384d4d77583d6a0f162550f9407b72ead7ce05005e9850eb8636f4d0dcb2f9e3c1244e47c84f041d5a9394f971fd899fd82c4329d9b", 0x72, 0x8}, {&(0x7f0000002640)="0f63d798fc581da4d1a6d952e567d6aef8315cd7de1aa3be2c7cdedacd7ff7b5e39e33008b71c90dd28a77c98b035840ed8c0dac242ada567314f2e8a907fc044b65169ad1901a87e3d5e783c9c020a285bf8449d90add76a3fefa33b7459b4d9f30800584a887a8154a3d5557ffaf02984028fc15019b73e48d3c43a7", 0x7d, 0x10001}], 0x226003, &(0x7f00000027c0)={[{@nodots}, {@nodots}, {@nodots}], [{@obj_user={'obj_user', 0x3d, ')**{.'}}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x10000000) 23:19:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000104010800000e8aec7be332befa00000500010001000000"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90020000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14c, 0x2, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x3ff}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0xd0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000050) 23:19:25 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write(r0, &(0x7f00000000c0)="047749b347379951c752f249e7a98586ddf9202314b1e1c8c5cca96d7c132f5300000000da10f43aef84500e94f7590f9eff5c821d0b1cc0f675c382701670e88164436e913ef92318a79bbcf2e542d4def000b05cfa0a769329ba666dd64f1b5723565400d0461a496b53d6b66949a5af776012f037aad0ee558014165e6752927280cddafdc858f53c4f67be6d478c96f68942e4b51e0165467578e9e3b87e0d7643ac7331366d79a31885ee2f9eea29352ebcc04f00"/193, 0xc1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:19:25 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x453, 0x400}, 0x10}, 0x1, 0x0, 0x0, 0x44884}, 0x0) io_setup(0x0, 0x0) 23:19:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) r8 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd^o=', @ANYRESHEX=r8, @ANYBLOB="9a951d85"]) splice(r4, &(0x7f00000000c0)=0x9, r1, &(0x7f0000000100)=0x802f, 0x200, 0x3) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:19:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:19:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7635}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14004}, 0x440c0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) 23:19:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7635}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14004}, 0x440c0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) 23:19:25 executing program 2: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x46c7, &(0x7f0000000000)={0x0, 0x8959, 0x2, 0x3, 0x1e1, 0x0, r0}) close_range(r0, 0xffffffffffffffff, 0x0) [ 361.727105] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:19:25 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000080)="6b1a1726336c3c70", 0x8}, {&(0x7f00000000c0)="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", 0x948}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000a40)={0x78056d24, 0x6, 0x5, 0x7, 0x2, 0x3}) [ 361.737298] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 361.783115] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 361.798996] mac80211_hwsim hwsim5 wlan1: left promiscuous mode 23:19:25 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1000854, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') getdents(r0, &(0x7f00000001c0)=""/100, 0x64) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r2, 0x0, 0xa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400)={[0x5]}, 0x8}) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 361.883450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.888866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 361.893265] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.893344] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 361.910909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.912426] Bluetooth: hci2: Opcode 0x0406 failed: -4 23:19:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) r8 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd^o=', @ANYRESHEX=r8, @ANYBLOB="9a951d85"]) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) [ 361.918118] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.918208] Bluetooth: hci3: Opcode 0x0406 failed: -4 23:19:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7635}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14004}, 0x440c0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) [ 361.926230] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.926412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 361.929546] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 361.929634] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 361.943474] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 361.943577] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 361.991522] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.993922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.994122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.008181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.008677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.009070] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 362.009785] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 362.156650] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 362.161494] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 363.988910] Bluetooth: hci0: command 0x0406 tx timeout [ 364.052890] Bluetooth: hci7: command 0x0406 tx timeout [ 364.053837] Bluetooth: hci6: command 0x0406 tx timeout [ 364.053928] Bluetooth: hci4: command 0x0406 tx timeout [ 364.054651] Bluetooth: hci3: command 0x0406 tx timeout [ 364.055576] Bluetooth: hci2: command 0x0406 tx timeout [ 364.056345] Bluetooth: hci1: command 0x0406 tx timeout [ 366.037158] Bluetooth: hci0: command 0x0406 tx timeout [ 366.100819] Bluetooth: hci2: command 0x0406 tx timeout [ 366.101891] Bluetooth: hci3: command 0x0406 tx timeout [ 366.102880] Bluetooth: hci4: command 0x0406 tx timeout [ 366.103852] Bluetooth: hci6: command 0x0406 tx timeout [ 366.103916] Bluetooth: hci7: command 0x0406 tx timeout [ 366.104790] Bluetooth: hci1: command 0x0406 tx timeout 23:19:36 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x83) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:19:36 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="e90200000067b1480000012e9f6606bf696c653000"]) r2 = memfd_secret(0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x8000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x88001, 0x0) fremovexattr(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r9}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(r4, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f000000000000000600000000000000b20000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r9, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r11}}, 0x6) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="1da8e2647f1ce0bbeff852dbb63a2b509784e76280b293b13b8c792e3ff1223fd6", 0x21}, {0x0}], 0x2041410, &(0x7f0000000340)={[{@uid}]}) 23:19:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) r8 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd^o=', @ANYRESHEX=r8, @ANYBLOB="9a951d85"]) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:19:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x33}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc650818b1e64446ad5dbf0147", @ANYRES16=r4, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 23:19:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7635}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14004}, 0x440c0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) 23:19:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:19:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r1, r1]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getgroups(0x6, &(0x7f0000000480)=[r1, r1, r2, 0xee01, r3, r4]) getgroups(0x1, &(0x7f0000000100)=[r3]) setregid(r5, r6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 23:19:36 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_send_signal(r1, 0x36, &(0x7f0000000380)={0x3e, 0x7, 0x61}, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x21) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@local, 0x4e24, 0x1, 0x4e23, 0x8, 0x2, 0x80, 0x80, 0x11, 0x0, r5}, {0x2, 0x8001, 0x642, 0x0, 0x2, 0x7, 0x8001, 0x7}, {0x5, 0x9, 0xd3, 0x81}, 0x28cf9418, 0x6e6bbb, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x3c}, 0xa, @in6=@private1, 0x3503, 0x2, 0x1, 0x0, 0x200, 0x3, 0x7ff}}, 0xe8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000080)={0x8b}, 0x0, 0x0) 23:19:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f00000001c0)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa03420, 0x0) [ 373.093253] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 373.098003] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:19:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2a63}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}}, 0x0) 23:19:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:19:37 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7635}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14004}, 0x440c0) 23:19:37 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0xffffffff00000000}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x20}, 0x0, 0x0, r2, 0x1) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB="bf7d"], 0x2e) 23:19:37 executing program 4: ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0xffffffff, 0x1}) r0 = getpid() pidfd_open(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES64], 0x0) 23:19:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x42) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000012c0)={0x0, 0xfffffffffffffffb, 0xa3, 0x7, @buffer={0x0, 0x1000, &(0x7f00000002c0)=""/4096}, &(0x7f00000000c0)="2954065eb15ae2a21eea70abf2c4c73649dea82f4db33758eab65c6c31314ea4e0b0efa19f6aae14f54ab253c5a6dc9eab33b9dd6cee32c7fac7417cafeaca73012c9dac2a44092c3c7c58ec758e55a03920b9cbb4ae173ba572a1f990e04793562ac065a5406bfdeabcd2bb5171f2f91de446d949715bcb416d67f9f507e29484b38cc1325469454b553bd0431f0eeda18f01e75bab0faba6eb698fd1d79324b88231", &(0x7f0000000180), 0x0, 0x37, 0xffffffffffffffff, &(0x7f00000001c0)}) r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) close_range(r1, r5, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0x4, 0x81, 0x1, "5d269e01"}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 23:19:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001480)=[&(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/200, 0xc8}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/214, 0xd6}], 0x6, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/13, 0xd}], 0x3, &(0x7f00000007c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/127, 0x7f}, {&(0x7f0000000880)=""/192, 0xc0}, {&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/148, 0x94}], 0x4}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000b40)=""/72, 0x48}, {&(0x7f0000000bc0)=""/160, 0xa0}, {&(0x7f0000000c80)=""/102, 0x66}, {&(0x7f0000000d00)=""/78, 0x4e}, {&(0x7f0000000d80)=""/143, 0x8f}, {&(0x7f0000000e40)=""/225, 0xe1}], 0x6, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/202, 0xca}], 0x1}}], 0x5, 0xdf43ea8c0be55b5b, &(0x7f0000001380)={0x77359400}) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$KDSETLED(r2, 0x4b32, 0x6) [ 373.502080] sg_write: data in/out 1717986882/4 bytes for SCSI command 0x0-- guessing data in; [ 373.502080] program syz-executor.6 not setting count and/or reply_len properly [ 373.535915] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 373.536345] sg_write: data in/out 1717986882/4 bytes for SCSI command 0x0-- guessing data in; [ 373.536345] program syz-executor.6 not setting count and/or reply_len properly [ 373.553037] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:19:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000007c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@private2, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0xfffffffffffffc2c, 0x14, {{'sha256-generic\x00'}}}]}, 0x13c}}, 0x0) 23:19:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x4bfa, &(0x7f00000000c0)) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x8, 0x6, 0xfffffff9, 0x16, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x80, 0x7800, 0xfff, 0x101}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@multicast1, 0x4e23, 0x8, 0x4e23, 0x3ff, 0x2, 0x20, 0x20, 0x70, r1, 0xee00}, {0x3, 0x4, 0x8, 0x315f, 0x2, 0x100, 0x7, 0x7}, {0x8000, 0x8, 0x0, 0x4}, 0xfffffffa, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x6c}, 0x2, @in=@local, 0x3501, 0x1, 0x3, 0x20, 0x1, 0x823, 0x80000000}}, 0xe8) 23:19:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:19:48 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r1, 0x8, 0xfff, 0x100}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000100)={{0x1, 0x1}, 'port1\x00', 0x0, 0x847, 0x81, 0x101, 0x2, 0x4, 0x4, 0x0, 0x1, 0xdd}) truncate(&(0x7f0000000040)='./file0\x00', 0x2400001) 23:19:48 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r1, @ANYBLOB='.=', @ANYRESHEX=r3, @ANYBLOB="2c04"]) accept4(r1, &(0x7f0000000300)=@alg, &(0x7f0000000140)=0x80, 0x80800) write(r0, &(0x7f0000000900)="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", 0x259) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r4, 0x0, 0xfdef) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(0x0, 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001240)) io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r6, &(0x7f0000000180)="932eb43cb9909195e0bf2aa147dd3793205a36c37de394391475c78f0b897770a0a6d110b93c930670f65906bbc41b539314b796f725d420fd745ea5a5cd9232726adcc91f715f9dc165bd6a8ec3fc875f5dc41bd01f18e1622e1d134d202c347a61745531273c5c26f5a7c519496bbff3953ca372aca58b948f4998576422aaa0c0c539c6a0211df79a1d61c182de677ba2fde868698aa1c814c6a6ddc58c6785c9c1ab89fb1ecc1d4d247e429ee5162a9ae9be4804506eee4a461fa0c031cd44d5fc464035d918ff6daaa45a28f92ec086a80c55f7564c39c25a", 0xdb, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9, r4, &(0x7f0000000280)="bf1402b625c36a3aa30faf3ff7ea31c5e7d3b9a5adde280478db678338a09a26cb870de2fdec8a72859c65dbc175384127017de3f84405a0c9035662713ab36ac96288d077fcf4d6a7939d3c55e9b7ebd8aa316956d28c1f2ef62e4539010424b5", 0x61, 0xdef, 0x0, 0x0, r0}]) perf_event_open$cgroup(&(0x7f0000000480)={0x3, 0x80, 0x5d, 0x80, 0x5, 0x7, 0x0, 0x6, 0x14820, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x8}, 0x8, 0xfffffffffffff55b, 0x0, 0x9, 0x3ff, 0x79d, 0x1, 0x0, 0x4, 0x0, 0xec8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) 23:19:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:19:48 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e39313833393035343700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="20000000d897e2e1d897e2e100000000d9f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000d9f4655fd9f4655fd9f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000d9f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000d9f4655fd9f4655fd9f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000d9f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000d9f4655fd9f4655fd9f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000d9f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000d9f4655fd9f4655fd9f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000c48b648700000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000d9f4655fd9f4655fd9f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000c8ee3c9e00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000d9f4655fd9f4655fd9f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3931383339303534372f66696c65302f66696c6530000000000000000000000000000000000000000000008af507fc00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000d9f4655fd9f4655fd9f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4518baf00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d9f4655fd9f4655fd9f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000070000000000000000000000000000000000000000000000000000000000000000000000000000000e8b186cc00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000d9f4655fd9f4655fd9f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c4504c7b300000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd0e, 0x9, &(0x7f00000009c0)=[{&(0x7f0000000600)="1b96a6437fa4acbed82b5182dbbefd3e61c24247d5de804d73fbd38c9092894a9b8039ee7d9f311698da10575ee431727a2721bfe55e876af6adfdc7bbec9ccaa9d9b529b4456346ae76a1be8267114dd222bd125b39abfea60bf141132dc1dad10b34c69de7c80dcb900079d36ecccf61e6be24e09ba8ebf4d0f2a233bd1633b4afab8a14c212b6093a27bb385987fdf1367721279920d37b2c0e115dc38bc42b39b0bb4f0e2cba08073a5398e47190057845344fc9d15bb1c4e169fbfffe0a9d79345d0d9bb5", 0xc7, 0xff}, {&(0x7f0000000140)="c824bde6a3c78e035bb9ea57d07f7757905fa034f9d2a4993398eebe6c12e28b4b39a0f32a4bda6d0bf738d33a7194bcb8dd1f105fadb46a11cc528992e221f2d5791c51d1297c59562a69afdb0be9864f6bc465c52de2308c400d42e06789ee2054289bead1df3a8fac4ec47a8f60719216e8f9d953b03bda6fb7", 0x7b, 0x100}, {&(0x7f0000000700)="be205881674bd888c12f964c346a1a0f56d976d61398fc2e0b70471a34f1538eaada140a880eaca97bfb7d971e918bbdcf2a2815e419bb5750f3d9f23e8ab261d1d1", 0x42, 0xffff}, {&(0x7f0000000780)="1b47ad665af5e4483ebad8e57bc4051d4c10cbcc6c9145fd1b3815c17ebbbcba39db5cd070c3fd9f760af0b9c1b90ccde340f3f9d30b908bafde6c2d092e321ac17cb86be6b7069d19253c233f38ed70bed06ad958fa55b843dffc19452671be962bb3d793961977bc4c0703a093062d2c6bb100", 0x74, 0x8}, {&(0x7f00000000c0)="91f6d04b5fc462a32ed89eb4e8298d482f5a91a6df152ae54ab187e91332185f8b6979d08c496bdd9491ada31e32", 0x2e, 0xff}, {&(0x7f00000001c0)="df69299d89347c8ed06d70b6b656e487a75eb3e76bdf30adb9cdb346be6ef70f", 0x20, 0xd8d7}, {&(0x7f0000000800)="c095bbe39a6de0d02ddbf0ade498660b8ead6ef8bf4051711c57941ec2e2e17644edbd83ccf4b466a6341706367d7ce168d2fd473d05c0c293a1e2ee4aab1af8a886dfef5844926a535952c8ab398e94ed878c1c209981b10c6ce89346fc93ec7ed0408192eb7d0d961d4695e906276663b6300cf8f3d99280d8da1946334e8003c3b29cf8802629662710c1", 0x8c, 0x7ff}, {&(0x7f00000008c0)="71e7275c687528812e70ff9f9210ca", 0xf, 0x1}, {&(0x7f0000000900)="cb65e0274ec727e81f89d1a02cb843e377a0ffd909fe7074cb1943842c8346ca061ef77b5b5bd7820bd0bfdd87112a29e25a9e653e38603b3ff0c8d652f34549e1590052d8a92b5ea3f92fdd63c4355b1669a9bf3044bd63d3dc771dd008b32adf2905f44a84dc37c308cba10d157f59325de09aee1e010ea73a2ac5cc926f8e79b622040ddebe9e00367287feb67f510f053d10ff1e32b15715179b0a78f58746da2669", 0xa4, 0x1}], 0x0, &(0x7f0000000ac0)={[{@mode={'mode', 0x3d, 0x3ff}}], [{@measure}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@subj_user={'subj_user', 0x3d, ':'}}, {@dont_hash}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x9, 0x101080) mount$9p_fd(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x1002020, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'fsname'}}], [{@smackfsroot}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) readlinkat(r0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=""/185, 0xb9) 23:19:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r5 = getpid() pidfd_open(r5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r5, 0x2, r1, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000002c0)) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) [ 384.407888] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 23:19:48 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/37) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 23:19:48 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() pidfd_open(r2, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x80) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x800, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(r1, r0, &(0x7f0000000080)=0x8, 0xfffffffffffffff7) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 23:19:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r1 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3f, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1260, &(0x7f00000029c0)) r2 = getpid() pidfd_open(r2, 0x0) r3 = dup3(r0, r1, 0x80000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x1, 0x8, 0xff, 0x0, 0x7b73, 0x0, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x0, @perf_config_ext={0x9, 0x9}, 0x4, 0x2ccf7bcc, 0xfffffc01, 0x7, 0x1, 0x5, 0x200, 0x0, 0x2830f71e, 0x0, 0x2}, r2, 0xc, r3, 0xb) [ 384.526272] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 384.533477] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:19:48 executing program 6: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',LBdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RRENAMEAT(r0, 0x0, 0xfffffffffffffe2c) 23:19:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x401, 0x0, 0x8, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4240, 0xad) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='!\x00') r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0xd400080b) unlink(&(0x7f0000000080)='./file0\x00') 23:19:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r5 = getpid() pidfd_open(r5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r5, 0x2, r1, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000002c0)) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) [ 384.827166] audit: type=1400 audit(1754608788.807:18): avc: denied { watch_reads } for pid=5362 comm="syz-executor.4" path="/syzkaller-testdir820873600/syzkaller.L6j5sJ/56/file0" dev="sda" ino=16008 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 23:19:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:19:48 executing program 2: ptrace(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = getpid() pidfd_open(r1, 0x0) ptrace$setregs(0xf, r1, 0x8, &(0x7f0000000000)="a7680a956b60b6abf90e429c90cd56d5045f86337a64601cb2ef67894a3c8af5720b02acbc1e6deff446f0a5eefc5e3aa3070b09c562cfe5775359a0eb46ac816fa105067717b97f87f982fafbc9c131c2390d80ae693ae948e884e91dece9366e8f1bf110267de1f49320e8d4490b102c53108ec2f3f79f84692f99eab499e2193b6f2106d38b78c0951422415252610efa16fa541c5db32324388050d829b85617175cb63b4a2e9ea4ba9c946a39005f3200930ce5af87a618d1372c34feb9dae8ad69a2f8f3925a9f69d4d7c59fa4b3bc2cf8a5abda3423f7f89c171844276c6b") finit_module(r0, 0x0, 0x0) 23:19:48 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x259) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000000000)="fa", 0x80000}]) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0b010000000000000000000000000000000000000000000000000000000004007272b8b1a02059640d69e4b9dad1403abb96fcc5760e3733f854424dccb4ef079eb9e3633480212c6d9a63358770617e8b97336b48f30b4b56c619d1513e5f644e2ad7e06921a3214dc8767cef3a3b607eea9a6e39eae2f07b8b80f100c88fcababd1b3c211c"], 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001240)) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)="932eb43cb9909195e0bf2aa147dd3793205a36c37de394391475c78f0b897770a0a6d110b93c930670f65906bbc41b539314b796f725d420fd745ea5a5cd9232726adcc91f715f9dc165bd6a8ec3fc875f5dc41bd01f18e1622e1d134d202c347a61745531273c5c26f5a7c519496bbff3953ca372aca58b948f4998576422aaa0c0c539c6a0211df79a1d61c182de677ba2fde868698aa1c814c6a6ddc58c6785c9c1ab89fb1ecc1d4d247e429ee5162a9ae9be4804506eee4a461fa0c031cd44d5fc464035d918ff6daaa45a28f92ec086a80c55f7564c39c25a", 0xdb, 0x1, 0x0, 0x1, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f0000000280)="bf1402b625c36a3aa30faf3ff7ea31c5e7d3b9a5adde280478db678338a09a26cb870de2fdec8a72859c65dbc175384127017de3f84405a0c9035662713ab36ac96288d077fcf4d6a7939d3c55e9b7ebd8aa316956d28c1f2ef62e4539010424b5e0891089242bf57d4005d15125d9140b29aa32c3b5c80a27ec7f5b95f6258bf5ac5835a45b810f6a1e61c76c8da548bdd0", 0x92, 0xdef, 0x0, 0x3, r0}]) 23:19:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="52784a7a0d69c2", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) sendmmsg$inet6(r5, &(0x7f0000003bc0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x1000}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x401, @mcast1, 0x6}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f00000012c0)="c733f7816bd83731ac701caf187c2bc25fbfb4ea3fe7db00019f8b38b9301ae8007852bf063c919e2572190052c34ee9f24512e49f89ccf63c9ed00250171d5a25317d66b4272690344c98d53445c192fb9a5d72a72f7e4bcd79e8e32b88064ddafab417c4e20dce8681e9b50a0231704d6fcf0a1baeb356eff46907e489da4fccf9536b81a3793dc825af0f86bd70f3dad56554edd92183474c1dc14fc9860fe0945ca0e3fe4eabc7781642c93ac449089bc552bbf1d28f1c78509be83a6f848187d1ea5b90", 0xc6}, {&(0x7f00000001c0)="d64c260fde84b6643afb1bd43d5fdbf35bcbf9d3febe3ccbcf99ff4848904db86ea4128b953a2d3b0c035449d3dd986493780a48af550afca005f535943c", 0x3e}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f00000013c0)="b8d61527c897151c40329e0e78b4840393dd0d3ef602f7f7f4591106133d529dc34be568e3e3a863c4257492a697cb0b55781b7e8a0c8ed7a54832bdd38d2434e29d03450ce9405e3de15967e20d3182434bb483a8533a7640afdda3693bf097eada577d48c1243bb3ec26bebaf2020755657b4e77658a714aebf157a9f8c791e1d415f4eece2fcf4b805f99db84c8", 0x8f}, {&(0x7f0000002540)="f770575f621dd8088c946426921078b9eb1c3b4f20c0dc17da47dd0cad788a88eaee5edae77c250bcef998b0e78843dccd682fb8bb9ff1ccb011c64908cf7288e606bd28c30431237d568c582a644f8419096cc3420a3d08328106d6e0851fe24331899e78e67e807b527c80add2190858a362936e74a8d3b893c1bb1f27912d173ed1c7e6a6ac90468507e75a627ee830d4ccf85fc4dba1984ef1e0982334f65ee39c59c6c2ea6a6a2deb53aa72d403e9a54b387c8f5ff9deccfc63a0406e839696785079f28004127886b81af1ba94d7e3bfa3eea97f19ed77c0113056f488b1c455212896fd53fd53faed13d2180b43", 0xf1}, {&(0x7f0000002640)="cad8ade73e4c78ddcb001f2e79dc73c15f3b2ac74c140499d6c2fff347f81d741434eb41950534bfc9a531e67867cc6d7c81875ae75516851eba3feb4488653575f2dad95a11cf95defc5af2aac71019cc16381e574300e6af28f69df06fc6e155dbb7c97c1dca4d393ad1282d0877264af268fdfcfe68b1a77fe4cb980005719ffd83d23c0e3b49991743c31778cad586bd59bee01271c2c9d093400bfda97e9a8215fb0e418c1adc1661c05f8b62b9614f00aa25a268352f16f9fb6f8faaee8b05c205f356fe539987a8aae85883f09c1c2a7f1c9b86fcf3591684aa5e2e8d6db9241f138a2d0abcae", 0xea}, {&(0x7f0000002740)="cee5b69be302911f00b512aff4a1daf095a8fd84ecbc71e6a3eac5f8694a338ace6820c27021dfa412d99d11ad9e237486c5b4209c1c832f2e21351b190eb377f04c57eb55e3c9e4fe402456b4808864c028f1a8306dae18a148188d7420bb3abbeeefa6bfddcc3004099726c0d06fe798953fe9189798b833c7c9967519ee0d47ce29ff2ee4435ee0435d5db2f3bc45695798e6270a4245da0b152a3108cebaf6daededc40852cbd5be23d2ddf4112b46308674778909d0a65c7a913c597946c9256c82cca692529b9ab77f2b9b7acacb4e", 0xd2}, {&(0x7f0000002840)="58322b2c7848bb4ef93d2df82d23d409863d5770d6ac25b290014d4aecf16545f0e313dd57a62385872dc27c25143319496aa41b71876d3a96fe9d9fc6447a76849bdf11e04e36e3eaffbe8dee6ec06f57269ed1f79438cd6c34d9d607e5b0216a00aca1767ade7f3034baedd63ea6a0a12ffcb6e73c26d6ade59636933a016a6ed040a510717b4b3d314cb9e25187a5846b01138e5ceba6806418cba6b9", 0x9e}, {&(0x7f0000002900)="1c18a9e1d49846ef4a4c5b5af57b13e0e3acbccc9d8b956961e62bbce35dea6f794992a00d028e986b2311d6d41a6e81f1975b6029d0691d4c571f2b4fdfc89d62649b6b9d1f2cd09ed83c60fd9cad96e14cd18d0ba388d949e90dab7b483a9622b01de9d3f15054c88342f199962d9c543194de20c8a01a913d3369cc2058dcc34c93ba70c46976a779181f73aebe03d0f5849f2077b7c5922b6cfac097491558ac31354e9e", 0xa6}, {&(0x7f00000029c0)="89ff5927947b20a93d4847106430df598e687b7a7382754b7d9d25901ce177548c5cc6a301daa1869c339d69d4f504db93e97a44f7cbbfb5b929c1a4eaf49e7fb37ced2f1e03fb8ed0f5b8bf651c262ec6f4b6673e43176a0febd887c536d90a3281ec692aea334b2ff147f282366a63d011107a9297970f12cef2e7b79a49e0513382a73841b4547889b7f7c28217fc2c4c037f05881c9a92e074ed9ef0245807460fd20fbd94ce666e32915df09cb8376e7c491534464e14149b2380bd77e791b836aaa92c7ef403f47a4685e40c9931dbdbd8c1a06fe12f3caa0852d06fd5881820579029aaa8980bb78d4eb87aa2eeaa9e94ea", 0xf5}], 0xa, &(0x7f0000002b80)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x4, 0x20, '\x00', [@ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x38, {0x1, 0xc, 0xf0, 0x1, [0xac0, 0x40, 0x8, 0x2, 0x10001, 0x80000000]}}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0x8001, [0x4, 0x3, 0x6949f8c1, 0x6, 0x2]}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x29, 0x6c, "2572b26b2550a750b61a34c693c5fa0a19bd647fe016e56e8312a712f5f988fa324200b463b60f9d8a248af31dad213c5f941e543c23ae00d826b6d9ac774743cbd84c3ae8139163f75df617f30be0b126b9e91e5d124d9c949519a6c787a3027dd51e5030ab08aff5474292"}, @enc_lim={0x4, 0x1, 0x6}, @pad1]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x3a, 0x19, '\x00', [@enc_lim, @pad1, @enc_lim={0x4, 0x1, 0x5}, @generic={0x1, 0xa5, "045da2ba37191a1807cb22b7235f8c86dc1ad905cd01cd08b2723a4b6241dfe0b4d759a379efab3fbc88ada860bc0c6076c40eb3ba545dddbfecfcebedc3b33804145078b4ee4e33527994f7729ae295067a4ffeda757c3b78a155e3c54cdc23e7c1a81f82a9aa4d362fd6f94ce0e75361979df3cc86f70fa7de68762c1a8612890e401a768dfe0ecbeb4882dae980bd869ef50d5ce4335c04148c870e35e2ebb147604f68"}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0xe5d4}, @enc_lim={0x4, 0x1, 0x3}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x3b, 0x17, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x0, 0x2, 0x80, 0x4, [0x3]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x87, "b57d63dd24e7b17d046a96c7240d048677beb4fcf37d769506c656d78fc05b98be6f89cf2e294028de5f311faad24fb1744e3618628000239fbe116733a8e38b33dbba44701b8abc2929124e78c4601319d753095518170313c72e5d42077c54d734b3c13a0538367120a9c04a9e0dd006d1d3da8e297dbbf48849a03655de96684291122293b4"}]}}}, @hopopts={{0x1d0, 0x29, 0x36, {0x0, 0x36, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x8, 0xac, "db4ad69126705dd3c75a34e07f7aec4bfd9c3d3ce4b70b7a4889b83ebaac6eb57d75009703ad1d6cb92f26e9d5942fa0eab06a4de930bbe44d7138f231098a98fe33002009c124aca2beac39eead0be4ac776d6801b14adb262a5588cb24cc1785cd40e2e054ff19067ce83e68a74b71ddc5b450d18c1a39ac3f71818b4624111123bfd3ebd20ddcad2d9761743bc0416d53013feb202452f6b4877cdb0eda67e1c87e8f31f76fe4468ef5fd"}, @enc_lim={0x4, 0x1, 0x81}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x81, "0082052e9846d9432c2c61334763624c59c0eebd321e803c91afb896574ec8673f62dbf0a93ac3d951692f88293160616b4357c0c18a17a9e9c819e1ca8470f3d66a0d8d9af638ceb7ee872f148dc67a13ffab60969e336ee55d59beb41de819838e3dc3b18a8b703730a071bb249bd4c026bdb458eb7dd37c4e734f7f7b030cbc"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x58, {0x2, 0x14, 0x1, 0x8, [0xffff, 0x9dc, 0x100000000, 0x8, 0x7, 0x0, 0x1, 0xffffffffffff908c, 0x64f, 0x5]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80000000}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x40}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x550}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000003340)=[{&(0x7f0000001480)="c5606ae747b3a41fe74456dfc3eec7b51309ad41972a6e2820277cf1a867413b22c8e5962802de7dbe4294e0618fe315d229bdc08c75fbf49c0ff58c7d939336a0e86efc2fcb075e821de2de921713728ef3e13beb39348e727658ed51b9005e6c72d52a7d0736724596b2c4517c1a", 0x6f}, {&(0x7f0000003100)="22d3b112b7b6e0919d96c0a677dd4cfb557b74a7146297b4ef5be2407d71625be0688d8467e657ae58ad39c3bae83d5fea228247e51c153fce82b3074037257ab5215d5122bbc7fe875f58bad95c2b92dc606423516740da667e14aaed59a7a05508b5a88df64b401e4e0a1821fdb01904bd83ea5245367385d60af05c1169c6734221e0f3c0a2cd64ba9a4f7d0d3337ab18d9f96f4ec8b7dfd8ce458faa2f984c3df52460d2b748b8919f045c1ab652f5ce65ea2022af9c028bcc104809b9b2fadd050d496c72bbe19b63e089a124143bf918654872625f91f50e83c12c7d7a2c9a2991fe4ec1e56a3c9f81d445910f3072eba3d08cdc3add", 0xf9}, {&(0x7f0000003200)="aaa998304b2693ac8f60a4a5f71e08a83cdccf14a20c9bcbf4813a51847401ce3411d385ca0d69fbd628f05e2f", 0x2d}, {&(0x7f0000003240)="a1131096cac6c5e6421c043fc7dc3c76876b73c9cf215322b8a141b0138fa870bb9822a34d3170d0a0a136cb0a43b62f7a46b6402dfdc0f700ebba6020fa203c36b8139fd006a841cb5ccf7f8d960b561744021b90d15a164753590bb8d799cc153fc3dd0658abad8107736df77ea94610c30063e1e91bcf0158833d42f2c8f4ec0ff7762948282cc367015848", 0x8d}, {&(0x7f0000003300)="480d1dc28c04fa80cb0bdc61dadb6210382c9ca7d3c1c949c7d869860abf3bac5f707bb0d3", 0x25}], 0x5, &(0x7f00000033c0)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0xaa, 0x1, '\x00', [@ra={0x5, 0x2, 0x200}, @jumbo={0xc2, 0x4, 0xd3}]}}}], 0x28}}, {{&(0x7f0000003400)={0xa, 0x4e23, 0x4919, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000003a40)=[{&(0x7f0000003440)="97bf91912fde02089505d4fa4182fad870595946d33dc21a6e002f07f1d1b500fa75b5935d2c19953cd4f4de48f34d288a94fe37f375650cc3b6b8914576ff4427868133d461cbea2d0dc6420bbba1a4d55998a0a9bb033a9dae9813f4075d8a1028220a282dc65ac53e55a3ec3e121840335d92288d6cded9033bb979fe63a9ce", 0x81}, {&(0x7f0000003500)="facd4f3983a2", 0x6}, {&(0x7f0000003540)="c3460c6d374233e9bb569cb64e93af4c7edff0b5230ea820a652042822f826228010ef4cc5017f6138e5ccbf21a2f30fe9f5a2bc0a6aa6ce41a40fb9b992a726c9acf52c758536a6cdd8090240221fd9255698ae9f682f4ca964328681ec3b440db5b2bd7c7b8db5e5f796489b217f6c5bcc8172de9d0984d4ea39368de2234187ed95ca0922f02224ed85cac1824f26dcab8bd7bf1b3eb00fdd43eeb3913f3764bc58d08651ef71f57d463fe66d24296f86f9b8ea38a42f127d0d49a085cd345112ca38a9c0d3b84963991e3fe14c0d18249d7bfd4af7cfac1691dbb1", 0xdd}, {&(0x7f0000003640)="bacd44cd2d2c61d204693de131b11e730d9134d1e1740ea6b836dd9a7226df06aa6e344a709f14113e837fb3ca587b83db843d0d58f1a253e4db93d36e613380532720bc12f38d36b6b2a91c6c2414b6f4db26379f1f0d3838d1b1e1fee47ff96895a223c47ed79d4deaeb207cbaf68910e57cf785f8c2799895cdf612379849224e835b15a1c07738b08a7a949fafc74807367dc958dd68904807ce7538c8532d2416494b482313440f9699a60893f63d44145149d016fae7988278514f6ab09a2a793cbd523403de394479d703d08f00021624c139ab1bf7f40faf0c", 0xdd}, {&(0x7f0000003740)="9e99f824068d712b88c068cc58a513a163d3a98aca3af0b1ba51f99ff33a23ce07f095f7d4441d3591c685910bb8b00093bac8b982c18a8eec9aa511d50ffa11c0361cc9d01968830bc4fa9353046c5505ef95bacca47476dc28b18d790c6437257f5997a6f99b5e571e79416c82563bdedd3849de1c1bbbfc1177e871101052c90d1c599432479ba417abb51db85d7e5d12640b6cca78a5ed866d8d5bd297b9cf1d52b439b8e27ecf354c1b8ac18416291304a669bec266ca3dd9ac72bbc130d73853fb7f48b9154d5d0829716847b248cfe121b3f21764b854c8502b4e2f5da333708ad78077e3d2f19b", 0xeb}, {&(0x7f0000003840)="28900732d819a4ec9fde6810c0c5661347dd45b2bf929f4fef91138d3daad18cc446b81f0cd7c10f114515c2f6f6ae7be79a8ff89db3acba5d149e401bbb214261ff7a92c7551213f42c12d5b538224af015bdec8b4e0b72327f0c33d98c7ffa396998baef060274487a01190d9a1920", 0x70}, {&(0x7f00000038c0)="cf283e7ba05cbdd97647f16ec61a7c5cc2fa57e19ec94775e8fa2aff9b5f100822ab667640ef20243af2a89a8f831ee4fedefecda3d800d181b11ddcfcbe08ec915dd4aa81dbb7296d3937e6d756723e0d2baba5dc0cc65a6308ba7dbd41d73e4acf169af7f478", 0x67}, {&(0x7f0000003940)="46d18771b60cfe6ff31a8c80f2e7ff3e070ef062b048ebf3a69f8b90644fa374450a21d83f431f2bf6829af91079a0e7adf932ba4bdf8b8deebb6463d78ef28a546416da90e47b3089ea7db780d91b5cb2e299e0f16bcf685720", 0x5a}, {&(0x7f00000039c0)="55ac5c9dfe427224dea34ae784c2b444ad21b86c0a8cf3fb2af4cf85a84717d266564e8d3cf3daf017d3104d88b78d29741be2e6e46ae6d70290def594749fd13a6ae5653f2cc29b901159f2796b52170fd2153a2b91", 0x56}], 0x9, &(0x7f0000003b00)=[@rthdr={{0x98, 0x29, 0x39, {0x7c, 0x10, 0x1, 0x20, 0x0, [@empty, @local, @private0={0xfc, 0x0, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}], 0x98}}], 0x4, 0x814) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1f, 0x1a, 0xff, 0x5, 0x0, 0x10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x81, 0x7f}, 0x10080, 0xac2, 0x5, 0x2, 0x9, 0x80002001, 0x66be, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0x1, r2, 0x3) dup3(r0, r1, 0x0) 23:19:48 executing program 2: syz_emit_vhci(0x0, 0x6b) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042ffd02aaaaaaaaaa120381b0cf2e090020145b9f01000000000000008f062de2f850c5424ed20fb2539f62b53e5200ce7c3a178bf555fcfc77ff9b0272ea28ee6963b5963efed4f9d10f6bc21c8b72646c6d38182001f95c088faaddcf6e3f37f0ef8e559686a2ecf9e2b7"], 0x200) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xcb}, "8a4968fd834c78c2e48946d7f34f7ecff58d298c85684d7e57e2dccc917608fc613fd88d4dc5a73ebeacbcce8043a0e9d0e8cb4569c0a71481428eb65fc472826fc6425f47841efd65a83cbbce4b1c22e6c760f039aaab7dbd7b9141a07dbeeb8ada76c6564ed62b7d5be3a01aab574baa2ea37f9b6b96584a26ad7195a74cd74b94ae678cab34a130a0532f6cbf2ca95f8ba5ca1d5b3a0c458c97dfc53bf1694cdcebc0335228ceb685e1a196f5a75a5c300ab578111e4fe7daa9b48196d81a6f76b0b9ab5dcca2b0cc8f"}, 0xcf) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@any, "02f90d28bb49062f9a42112075bc8618", 0x82}}}, 0x1a) [ 385.068066] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 385.068294] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 385.072205] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 23:20:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r5 = getpid() pidfd_open(r5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r5, 0x2, r1, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000002c0)) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:01 executing program 2: getgroups(0x1, &(0x7f00000000c0)=[0xee01]) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r2 = getegid() getgroups(0x5, &(0x7f00000004c0)=[r0, r1, r0, r2, r1]) getgroups(0x8, &(0x7f0000000200)=[r0, r0, r0, r0, r1, r1, 0xee00, r0]) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4900, 0x80, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r7, r7]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getgroups(0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0xee01, 0x0, r10]) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000700)=[r3, r0, 0x0, r10, r9, r11]) setuid(r5) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getgroups(0x6, &(0x7f0000000480)=[r7, r7, r8, 0xee01, r9, r12]) getgroups(0x5, &(0x7f0000000380)=[r0, r4, r6, r0, r9]) getgroups(0x2, &(0x7f00000001c0)=[r0, r1]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:20:01 executing program 4: r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff80000001}}, './file0/file0\x00'}) mount_setattr(r1, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f00000000c0)={0x0, 0x100000, 0x140000, {r4}}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000180)='net/mcfilter6\x00') sendmmsg$inet6(r5, &(0x7f0000001180)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x9, @private0, 0x3ff}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="acbe469b159035c06a7f70bf4dd2c7cdbb56081405c3c923abe59489d7ced4c8906d58817aac779bbeeb5248141127d6a74a77655a024d79", 0x38}, {&(0x7f00000002c0)="86046caabe8ad18a2a6b8666051866d6fb02390397e12b9e907cdd90d578c4cd37edb124155d55468c54ed4f9d8c452841517cc77ce2367637e438a4cf90cfd76d5c7b6c2e80488e02ee0c", 0x4b}, {&(0x7f00000003c0)="bb4b21fbf8cc6475bb93e1d9e2065cd641260f9b0a2f3fe3d55a1f04955e0500aceed596c92899a434eb5506ad2b4f65", 0x30}, {&(0x7f0000000400)="50e52fa5a5182691a361b035d5e76a5725500a5351a784e2e80de346b2858c1f823a021171f1623c9a0836bcee83eec85a20e9f932d763bfaf2520494ed4f8879c30ced954130f4103c223a96b8045b35cee51ada3bef4d259050e61f63ad01883ee242772826733a70ecdc35502df2717c924042a6e40f9565c0272591d650c6f1abc658ddd7073dd7bc1d7e6bafc2d22c3828e522bb01ad2803d5acc15ad79e2a083e09bf0fbe81c3489778fda0f3f0a6980a2c3925ae3d6a1a3e72fb5a4b8e66dd8844c190618ca7f0b4cf970681732137c06be82ba534e8b178963b8d650823c6dc89a6d6822cdae4ecb9d", 0xed}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000600)="8a86d44ff438fde5ff5e84c78f6adb57af1cf29496de2fd84ab3545d0ee9d89fa944b45eacbabdef049c4eb92b747865698cc42546c74c75b0c1ee26bc75395a3a42af04d41b059e5ffb3687a22992785f81bd9b8bb39d0cc70bef6b62f9895d0017e723830a11b4bf553c08c4eec911c78a41da040f2dd4a441dd0397620637cec712151376487f4157d5cb871d029e0c38f2ffc8fef67705ab7da95a45a61b767a0560e004b53bca813bc0ff12295853f4656ea74e4c2db1bd930ab0784a5927277c9fed416b20cab86937e2ab5558ea70d1e1c19ed6ab", 0xd8}, {&(0x7f0000000700)="ad373c4a7bb032e25d7f4f166a3293c0967e398e6dd38672d15d3e375cdcdcf0df46de721930066b243288637fa6160f5c449db396790d676f3fef211a1989d513a19faae5c12fbeb626f1c1067aed9b8412b3a1be0d82c80178b3d2886e10e94729948cab78e59282a8011a9a00c74a51df93c6bc97a80a4a713c3dd34cadc7d32a0b278b5596c2553e0f1001c498d5af01b02606957c8d2baa8ed60a32e8b1d914cddbeaa76c89", 0xa8}, {&(0x7f00000007c0)="b3c3789a42071bf6a47c825de09b38d9f33e58f2b8d84e6573541cc4ef4b7dd130a3616f61885d217d9569f5c9241c8e16df296d440d9cc1f484f587e04e0ad891ddd4df6e8bb9c2f60719eb936e058475deb0e3bafa1afe7d8b3978486d9b9e9a4b6cca50008bf891dc88de3b83520bf4775ba4bddb383a5cb4faed1ab2dc872ed1467b0c2375431848e8", 0x8b}], 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000002900e1ff330800000400000000000000380000000000000029000000fc020000000000400000f5ff00000001fe8000000000000000000000000000aa200000000000000029000000040000000200000000000000c2040000000400"/112], 0x70}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000980)="96c5", 0x2}, {&(0x7f00000009c0)="a1689ccb8c1f0210884aec6acb5627f44e90f63a8b936b50436bf7fe826f213d31d174563e0562d6a8482a59336de85bb519f5e498d94fcf4a49db3ae5677ddba681a1dd4e8c3245766c92cf427000648566c1ff7d5550debf3162b4b63e7753398f795a01e1ded3d6d95f7afe1bdef8af50dac381e67e7dac50184d2e2e42d534667608fb66d2bb0f3661e45d37ac361eb1e305edc0f9c5cf2c00a7e54e03b73585ae41181d9c8ac42b78106c91169ff6e973ab46311408568d3e1c880847bff99764bded6193afa95f5cc10028b4e08fd986bd9bbf9d3f6f64cc22fa281a18c7f01ea094ee72836f12c80e", 0xec}, {&(0x7f0000000ac0)="0046a81ef66d828136eaa650c01ee8a4f9e5144fcea8957e3ff13e2360d5fc53f0c89148e3a9ff393316f46f1ef22fd5ce0a5dec3bd83f29e55eabdb36eea4893ac606e416f6e8eb230667fe514af5736348509e079739985c52134a53edb7f0eceb90c9ca72da37ab2b09ee3bd15d0a002bd0b8a0924312e786c97cd3f1f411c4010063a466296c3469982e9e8a0f1da39185ffdc74a7ec13fa3a7bc2dc043875bee6408ad5d7507a2898b1856f11fb24d061b9fefc913c7b23afc73980d98c5caaee5efca68b72b84eb377f6e29d35770f5772d0ccc3c67dfd1fb15baa9ee7712c3da5017ee2e6883789ae669992", 0xef}, {&(0x7f0000000bc0)="fd65407f92c6b62a03d3d2a77006cafc81eb399f1279abfbb78063add7355bcb96a9a9efff5e0914252aa3cb135f009da2ef87080449782d0bf0ffe803cd9a6cd4b4be27c14721604bad2c17413e5db5c8478655703e6accab49ee7adf7289ac85381b1b7ca0ae174635d08b1247c81b98bfa41803a563ae54a9104a01a39155885b56ea74eabff61773ba91f9515890220b4434fe9456537ec8ff43123142967657a1aac9ff147c94f1610c726ad2bc866998b6c477375dd674602a5ae0df", 0xbf}, {&(0x7f0000000c80)="8f16081dc7e6ba68f4f66f75808a926136544d70fbad85647d77f82cc6ec24485fdd855e4992ae2e7611c196e4c7ea1bf3b74b4173ce166de089ed741cd7a245a168519ef5bf986e0c9d45c8253aa3035200785795e22baab920ab273c50aac304573c9c3ed774c8ecf5c3762c453e42f0db0408b4975342b2ab13d259970260dde99cb4f3d889cdf1289de35c73f391507dc401b7852c6da754325a054dd469db74c7f3ae7d95ba85d869e0b832ca7ca69e9db28a54680654b9300b2cdc6a66673a9642", 0xc4}, {&(0x7f0000000d80)="b57f0c9ef26b239d6b055523a700b3653666ea67c75cb67d5de3835ee3f3012eb5b6a3cc4df8497b8c4e8995ed057b7ae63c577fd6b3225a8e00d24e20ca4aa82a61181b46cc6fc12a36694eb348d0d5f53952006fa1514333f47a6635f7c52958557289bd2dc74fc8ae894ab9c8e1c04cb8852e642769c7c6909ba35e3cad49d949e4c2633203182d1b79b8cbc68d711ede1d986a9987f4a2ffe43df37b45aa642b92ad07d22aaea76a8fc9f5ebf14e6aab8a2a3a8584b70f0eb3a28105d449aeed519384ff963d04dec0cf24eb7d86ef", 0xd1}, {&(0x7f0000000e80)="26a35ad83311e2447b2cba59ff15175bfc5687390d08eeee72ef66fdf8675c0ec5ab4fdb746ca5fca6c7b07e0bd2", 0x2e}, {&(0x7f0000000ec0)="a9cfccf26f6b840f70a292d19d82da385e40d75b92c69d44074b61914ea728c47d24fd03b254c2c8b09f4a1d2f961555", 0x30}, {&(0x7f0000000f00)="96a8ca2a44044cb14b724e9e47f14be1ffa60377b1cf1ef4b87563bbac9c54ca1714aa540da95f44908632a35900c35d8767f20fbc88768e289b68a4cc53a41ff07377895e355dd322582bef0120aed2607c5413dabb1322aa03a3c5a15b92c7a74323967fb180f565144d9319f52be82af64d5539a100a928db24bf73f3f6730e", 0x81}, {&(0x7f0000000fc0)="12879920c47c6c210f026f9faac65af5154f1c412938dac5af5ca1dcde6c2f5ec4e384eb938dac4b5361465d2b34893ada5e57651220c03f984c004b3d65448a2c4a632feaed2bd33a0ae991cb4f70aeb03e1af231b6e53a72c8ac2faadb0b1f77e7f96f83fa3b6536ac52d227d956c854ca34b908e680012e12518ed9777a4871464559d0f69976ce88c4fb2735457cb4986c520504a25aca245cb248393d460d53a0d473c4135527cf3abfcf6d385255c10f96aa7aedf9ff107d21400ac5d602bdb72b44cc68b59d15ce306d7a08648edaaf431079d801a2247b3cd332cb75dd25643d83c21eea91111cbdfd11", 0xee}], 0xa}}], 0x2, 0x4010) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x1}) 23:20:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:01 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r1, @ANYBLOB='.=', @ANYRESHEX=r3, @ANYBLOB="2c04"]) accept4(r1, &(0x7f0000000300)=@alg, &(0x7f0000000140)=0x80, 0x80800) write(r0, &(0x7f0000000900)="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", 0x259) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r4, 0x0, 0xfdef) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(0x0, 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001240)) io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r6, &(0x7f0000000180)="932eb43cb9909195e0bf2aa147dd3793205a36c37de394391475c78f0b897770a0a6d110b93c930670f65906bbc41b539314b796f725d420fd745ea5a5cd9232726adcc91f715f9dc165bd6a8ec3fc875f5dc41bd01f18e1622e1d134d202c347a61745531273c5c26f5a7c519496bbff3953ca372aca58b948f4998576422aaa0c0c539c6a0211df79a1d61c182de677ba2fde868698aa1c814c6a6ddc58c6785c9c1ab89fb1ecc1d4d247e429ee5162a9ae9be4804506eee4a461fa0c031cd44d5fc464035d918ff6daaa45a28f92ec086a80c55f7564c39c25a", 0xdb, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9, r4, &(0x7f0000000280)="bf1402b625c36a3aa30faf3ff7ea31c5e7d3b9a5adde280478db678338a09a26cb870de2fdec8a72859c65dbc175384127017de3f84405a0c9035662713ab36ac96288d077fcf4d6a7939d3c55e9b7ebd8aa316956d28c1f2ef62e4539010424b5", 0x61, 0xdef, 0x0, 0x0, r0}]) perf_event_open$cgroup(&(0x7f0000000480)={0x3, 0x80, 0x5d, 0x80, 0x5, 0x7, 0x0, 0x6, 0x14820, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x8}, 0x8, 0xfffffffffffff55b, 0x0, 0x9, 0x3ff, 0x79d, 0x1, 0x0, 0x4, 0x0, 0xec8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) 23:20:01 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x259) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000000000)="fa", 0x80000}]) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0b010000000000000000000000000000000000000000000000000000000004007272b8b1a02059640d69e4b9dad1403abb96fcc5760e3733f854424dccb4ef079eb9e3633480212c6d9a63358770617e8b97336b48f30b4b56c619d1513e5f644e2ad7e06921a3214dc8767cef3a3b607eea9a6e39eae2f07b8b80f100c88fcababd1b3c211c"], 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001240)) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)="932eb43cb9909195e0bf2aa147dd3793205a36c37de394391475c78f0b897770a0a6d110b93c930670f65906bbc41b539314b796f725d420fd745ea5a5cd9232726adcc91f715f9dc165bd6a8ec3fc875f5dc41bd01f18e1622e1d134d202c347a61745531273c5c26f5a7c519496bbff3953ca372aca58b948f4998576422aaa0c0c539c6a0211df79a1d61c182de677ba2fde868698aa1c814c6a6ddc58c6785c9c1ab89fb1ecc1d4d247e429ee5162a9ae9be4804506eee4a461fa0c031cd44d5fc464035d918ff6daaa45a28f92ec086a80c55f7564c39c25a", 0xdb, 0x1, 0x0, 0x1, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f0000000280)="bf1402b625c36a3aa30faf3ff7ea31c5e7d3b9a5adde280478db678338a09a26cb870de2fdec8a72859c65dbc175384127017de3f84405a0c9035662713ab36ac96288d077fcf4d6a7939d3c55e9b7ebd8aa316956d28c1f2ef62e4539010424b5e0891089242bf57d4005d15125d9140b29aa32c3b5c80a27ec7f5b95f6258bf5ac5835a45b810f6a1e61c76c8da548bdd0", 0x92, 0xdef, 0x0, 0x3, r0}]) 23:20:01 executing program 3: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 23:20:01 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xeb, 0x9, 0x7f, 0x6d, 0x0, 0x5, 0x20, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x10048, 0xa01, 0x40, 0x6, 0x401, 0x5ac, 0x1, 0x0, 0x6, 0x0, 0x80}, 0xffffffffffffffff, 0x3, r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000003c0)={{r4}, "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"}) 23:20:01 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) capget(0x0, &(0x7f00000001c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) capget(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x5, 0x2, 0x6, 0x5, 0x6, 0x77}) 23:20:01 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x88, 0x9, 0xfb, 0x0, 0xaa, 0x1104b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xba1, 0x4, @perf_bp={&(0x7f0000000080)}, 0x442ce, 0x2, 0x55, 0x2, 0x40, 0x9, 0x7, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x8, r0, 0x8) msgsnd(0x0, 0x0, 0x1d, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x40, 0x3, 0x81, 0x0, 0x4, 0xe221, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x8002, 0x7fff, 0x5, 0x4, 0xda5, 0x908, 0x5, 0x0, 0x2, 0x0, 0x3ff}, r2, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$userns(r2, &(0x7f0000000240)) ppoll(&(0x7f0000000280)=[{r1, 0x160}, {r4, 0x200}, {r3, 0x2}], 0x3, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x1f]}, 0x8) 23:20:01 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getdents64(r2, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x103) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) recvmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/240, 0xf0}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/5, 0x5}, {&(0x7f0000000dc0)=""/234, 0xea}, {&(0x7f0000000ec0)=""/180, 0xb4}, {&(0x7f0000000f80)=""/16, 0x10}, {&(0x7f0000000fc0)=""/176, 0xb0}], 0x8, &(0x7f0000001100)=""/78, 0x4e}, 0x40000101) getdents64(r0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = getpid() r8 = pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000000980)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/169, 0xa9}], 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000d9234e6a83fd78cd7b8fbe89e9ae75acde2289b2d1fe976e8db71dc6489e121b7229051b6a91a776284317044346c6ad1b9f403c48baae611d342afe175bb42b3178a2db3c6a11462f8fa2b0dc36837eb7895aaaf5c46170ff6ca3ee7a4caba338f1b4e363e195e240240f0485308a474023e579e4e873"], 0xc0}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000700)=""/233, 0xe9}], 0x3, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x2, 0x12103, &(0x7f0000000a40)={r9, r10+60000000}) 23:20:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001300), 0x80000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r8 = getpid() r9 = pidfd_open(r8, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r11 = getpid() r12 = pidfd_open(r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280)=[{&(0x7f00000001c0)="4f80392fb055882d2dfaccefa1f6e3a16faf708481dc52b1372c923c52977a041ce853be7ddb9514b4f290a6", 0x2c}, {&(0x7f0000000280)="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", 0x1000}], 0x2, &(0x7f0000001340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r5, r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xe8, 0x800}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004000019", 0x8, 0x800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f79ef63a07c515a6bab56094e19c51d3c558df571fe7a0597fdb0e9456cac1f1fe39fe4507ca2360b028fed2662e255a05ba9320c1c7c9d5dcd12f28cb68795eedf086706d89b04be0fea40f9de4014260dd09ee23d6d72b7c38f6"]) 23:20:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x80000000}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xc4, 0x19, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 23:20:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 23:20:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x80000000}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xc4, 0x19, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 23:20:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:02 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x47, &(0x7f0000000000), 0x8c0440, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) open_by_handle_at(r2, &(0x7f0000000000)=@OVL_FILEID_V1={0x35, 0xf8, {'\x00', {0x0, 0xfb, 0x32, 0x4, 0x81, "9d1957ac1ee1314e99242821a43f9843", "d2f59ca899cf265e50996a002400baff1e7eded03fd56eb72d9642c310"}}}, 0x2400) 23:20:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:02 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x259) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000000000)="fa", 0x80000}]) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0b010000000000000000000000000000000000000000000000000000000004007272b8b1a02059640d69e4b9dad1403abb96fcc5760e3733f854424dccb4ef079eb9e3633480212c6d9a63358770617e8b97336b48f30b4b56c619d1513e5f644e2ad7e06921a3214dc8767cef3a3b607eea9a6e39eae2f07b8b80f100c88fcababd1b3c211c"], 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001240)) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)="932eb43cb9909195e0bf2aa147dd3793205a36c37de394391475c78f0b897770a0a6d110b93c930670f65906bbc41b539314b796f725d420fd745ea5a5cd9232726adcc91f715f9dc165bd6a8ec3fc875f5dc41bd01f18e1622e1d134d202c347a61745531273c5c26f5a7c519496bbff3953ca372aca58b948f4998576422aaa0c0c539c6a0211df79a1d61c182de677ba2fde868698aa1c814c6a6ddc58c6785c9c1ab89fb1ecc1d4d247e429ee5162a9ae9be4804506eee4a461fa0c031cd44d5fc464035d918ff6daaa45a28f92ec086a80c55f7564c39c25a", 0xdb, 0x1, 0x0, 0x1, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f0000000280)="bf1402b625c36a3aa30faf3ff7ea31c5e7d3b9a5adde280478db678338a09a26cb870de2fdec8a72859c65dbc175384127017de3f84405a0c9035662713ab36ac96288d077fcf4d6a7939d3c55e9b7ebd8aa316956d28c1f2ef62e4539010424b5e0891089242bf57d4005d15125d9140b29aa32c3b5c80a27ec7f5b95f6258bf5ac5835a45b810f6a1e61c76c8da548bdd0", 0x92, 0xdef, 0x0, 0x3, r0}]) 23:20:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x15c, &(0x7f0000000280)={@local, @dev, @val={@void}, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x1, 0x2, 0x14a, 0x67, 0x0, 0x8, 0x6, 0x0, @broadcast, @empty, {[@generic={0x89, 0x10, "15dc4748f8bf6382f476bd82d722"}, @end, @timestamp_prespec={0x44, 0xc, 0x17, 0x3, 0x4, [{@broadcast, 0xfffffff7}]}, @noop, @generic={0x89, 0x11, "f2f616592458339a31ac9ac9acea14"}, @lsrr={0x83, 0x1b, 0x8e, [@broadcast, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @empty, @multicast1]}]}}, {{0x4f22, 0x4e22, 0x41424344, r1, 0x1, 0x0, 0x16, 0x2, 0x4, 0x0, 0x69, {[@nop, @sack={0x5, 0x26, [0xffff, 0xfffffff7, 0x5, 0x6, 0x8000, 0x6b52dedd, 0x4, 0x7fff, 0x1f]}, @md5sig={0x13, 0x12, "600650b02d984c0316887009f43f71bd"}, @window={0x3, 0x3}, @mss={0x2, 0x4, 0x6}, @generic={0x5, 0x2}]}}, {"e50d450e752e32db400b5a77a2f9a2d547e692122b58fb3fd1ce8d6aae87eabe49d89129f09f56d949cf3402a0a4d099ad07f46b3696622db9f799bfe507a9f391737210a459fc1829d638e196791be896b3cbd9f51afe5db22a8c5732acc721220e42fb18e8dafa12bfa9c1074659a901361639cb4061cd16cc1d53eae98a9f6eb012b972ba0d2cca2a9d0ea45c0c853fda"}}}}}}, 0x0) 23:20:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:02 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824", 0x31, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="bef28317c1eb1aec98bcce2c876b261a89"]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioprio_set$pid(0x1, r3, 0x2007) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x49, 0x29, 0x1, {0x3f, [{{0x1, 0x0, 0x7}, 0x4, 0x7, 0x7, './file0'}, {{0x0, 0x3, 0x7}, 0x10000, 0xf8, 0x7, './file0'}]}}, 0x49) 23:20:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:15 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x2000000) close(r0) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) 23:20:15 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000900)=""/138, 0x8a}, 0x40000120) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000500)=@ax25={{0x3, @default}, [@remote, @default, @netrom, @remote, @remote, @netrom, @netrom, @netrom]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)=""/243, 0xf3}], 0x2}, 0x42) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',access=user,cache=loose,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',audit,appraise_type=imasig,subj_type=],func=CREDS_CHECK,subj_role=security.selinux\x00,\x00']) pivot_root(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)='./file0\x00') r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x9, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = getpid() pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext}, r5, 0x0, r1, 0x0) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000700000000000000000000382900000000000000a938245a"]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000740)="4a0df9734e444ac6078d81a226bc610a022e2a3d7a4686b66e43f4a40ee918cdf5d2559d75151cf44363d6f8746fa04b9d23aab21af14641b0a717e9311d58a0c0c8c165273ecf855c17e1739c9fff055e0b7593f839cf9fdc67c92820e29dc98f82b4f12df6a3e13d2d4ff3671ed8b3fa99c208ae1c61cae349253a80d16188fdbb776d4b0560c81569c9eec363c1cff0dc0753e596ad93ef2bd2e35b8dafaca90fa295974ddf5ccf3c042471bce4c07d5a490d9d977d7a5988a3133bdc0f33be41d6f76bbc1039687def69afc573e63b94ba7bfea86de6a616ab2644a86fe05b87db9da1fcbe38a964cf8db1b211bccf55ea3d23860feb52", 0xf9) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @link_local}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5d, r7}) 23:20:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x20, 0x80, 0x4, 0x0, 0x80, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x200, 0x8000, 0x20, 0x0, 0xfff, 0x0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, r6, 0x2, r1, 0x8) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:15 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/211, 0xd3}], 0x1, 0x5, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf25110000000c009900090000006f00000006001200010000000600b5003e0700001e001300369883a40606e08181862d1b8186c8048b82129ba489331824488f050000810005000200090000000500010005000000050002000400000005000200ff000000"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4040) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, "d017e9"}) signalfd(r3, &(0x7f0000000000)={[0x44]}, 0x8) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:20:15 executing program 3: mlockall(0x2) mlockall(0x4) r0 = shmget$private(0x0, 0xc00000, 0x40, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f0000776000/0x3000)=nil, 0x4000) mlockall(0x4) mlockall(0x2) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) mlockall(0x2) mlockall(0x1) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmat(r1, &(0x7f0000b68000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x3000) shmctl$IPC_RMID(r0, 0x0) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) mlockall(0x7) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000b02000/0x4000)=nil, 0x1000) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f000082d000/0x1000)=nil, 0x7000) 23:20:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r4, &(0x7f0000ffa000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000200)={{0x0, r5, r6, r2, r3, 0x1, 0x7}, 0x5, 0x3, 0x5, 0x4, r1, r1, 0x8}) r7 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_STAT(r7, 0x2, &(0x7f00000000c0)=""/97) shmat(r7, &(0x7f0000ffa000/0x4000)=nil, 0x6000) shmat(r7, &(0x7f0000e84000/0x2000)=nil, 0x1000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r8, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) chown(&(0x7f0000000280)='./file0\x00', r8, r9) [ 385.075750] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 411.728175] SELinux: Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped). [ 411.733942] audit: type=1400 audit(1754608815.713:19): avc: denied { relabelto } for pid=5486 comm="syz-executor.4" name="UDPLITEv6" dev="sockfs" ino=11299 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=rawip_socket permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 411.790198] lo: entered allmulticast mode [ 411.861422] lo: left allmulticast mode [ 411.884894] lo: entered allmulticast mode [ 411.903475] lo: left allmulticast mode 23:20:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:28 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = getpid() pidfd_open(r5, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r5) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 23:20:28 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000900)=""/138, 0x8a}, 0x40000120) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000500)=@ax25={{0x3, @default}, [@remote, @default, @netrom, @remote, @remote, @netrom, @netrom, @netrom]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)=""/243, 0xf3}], 0x2}, 0x42) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',access=user,cache=loose,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',audit,appraise_type=imasig,subj_type=],func=CREDS_CHECK,subj_role=security.selinux\x00,\x00']) pivot_root(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)='./file0\x00') r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x9, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = getpid() pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext}, r5, 0x0, r1, 0x0) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000700000000000000000000382900000000000000a938245a"]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000740)="4a0df9734e444ac6078d81a226bc610a022e2a3d7a4686b66e43f4a40ee918cdf5d2559d75151cf44363d6f8746fa04b9d23aab21af14641b0a717e9311d58a0c0c8c165273ecf855c17e1739c9fff055e0b7593f839cf9fdc67c92820e29dc98f82b4f12df6a3e13d2d4ff3671ed8b3fa99c208ae1c61cae349253a80d16188fdbb776d4b0560c81569c9eec363c1cff0dc0753e596ad93ef2bd2e35b8dafaca90fa295974ddf5ccf3c042471bce4c07d5a490d9d977d7a5988a3133bdc0f33be41d6f76bbc1039687def69afc573e63b94ba7bfea86de6a616ab2644a86fe05b87db9da1fcbe38a964cf8db1b211bccf55ea3d23860feb52", 0xf9) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @link_local}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5d, r7}) 23:20:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) rmdir(&(0x7f00000002c0)='./mnt\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), 0x280000, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x982}}, {@cache_none}, {@access_any}, {@version_9p2000}, {@cache_fscache}, {@version_L}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'batadv_slave_0\x00'}}, {@measure}, {@uid_gt={'uid>', r2}}, {@seclabel}]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={[{@name={'name', 0x3d, 'batadv_slave_0\x00'}}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 23:20:28 executing program 2: r0 = clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpid() pidfd_open(r1, 0x0) r2 = getpid() pidfd_open(r2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) clone3(&(0x7f0000000240)={0x802200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f00000000c0)=""/11, 0xb, &(0x7f0000000100)=""/151, &(0x7f0000000200)=[r1, r2, r3, r0, 0xffffffffffffffff], 0x5, {r4}}, 0x58) fork() wait4(0x0, 0x0, 0x40000000, 0x0) 23:20:28 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) preadv(r1, &(0x7f0000001800)=[{&(0x7f0000001400)=""/228, 0x12b}], 0x1, 0x9000000, 0x0) 23:20:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 424.873234] lo: entered allmulticast mode [ 424.881275] lo: left allmulticast mode 23:20:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 23:20:40 executing program 5: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e4f6edaeb1ff964b113cf65f0be83427be17a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 23:20:40 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x2040000, &(0x7f00000000c0)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 23:20:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000580)={@empty, @dev}, 0xc) r1 = syz_io_uring_complete(0x0) fork() recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000100)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x9, &(0x7f0000002840)=""/157, 0x9d}, 0x40000002) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) fdatasync(r2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x1000) mq_open(&(0x7f00000007c0)='+,*\x8c]\x00', 0x40, 0x12, &(0x7f0000000800)={0x5, 0x4, 0xa64a, 0x8001}) 23:20:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:40 executing program 6: r0 = io_uring_setup(0x6352, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r6, r0, r0, r0], 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x0, 0x2) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f00000000c0)) 23:20:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = getpid() pidfd_open(r6, 0x0) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:40 executing program 6: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) getrlimit(0x0, &(0x7f0000000040)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x601}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x1]}, 0x8) 23:20:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x7c00}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/4096, 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001100)={0x0, 0x0}) perf_event_open(&(0x7f0000001080)={0x0, 0x80, 0x9, 0x93, 0x65, 0xf8, 0x0, 0x6, 0xa812, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x40000}, 0x0, 0x5, 0x5, 0x1, 0x0, 0xfffffffc, 0x9, 0x0, 0x3, 0x0, 0x1}, r1, 0x10, r0, 0xb) 23:20:40 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x1, 0x7f, 0x1, 0x50, 0x0, 0x83, 0x88c72, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffa, 0xeab8838256ea23da, @perf_bp={&(0x7f00000000c0)}, 0x1, 0x5, 0x800, 0x0, 0xfffffffffffffff9, 0x2, 0x300, 0x0, 0x8, 0x0, 0x10e}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0xf8, 0x4, 0x81, 0x8, 0x0, 0x2, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xff, 0xb5}, 0x21c, 0x1b, 0xfffffffe, 0x2, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r1, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7fff) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/211, 0xd3}], 0x1) 23:20:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:40 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x4, &(0x7f0000000240)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}, {&(0x7f00000000c0)="13585c4afd1804568ea24276", 0xc}, {&(0x7f0000000140)="d343b9fcc63f07dd93cd3c381b4647c9c716d0ed6506642426469baa3b288c7c04e1550a1bb691350ec0682469ffa3fc14ace617d5407837408415adc4977ddac052f2b5b21307d3e25f85d1806a4f0fa04da4e210adbab6467e10e3faca9c005310b8c65fb886ca9483915d35aca4711e3016ce50fb0beb79690e84fd6d24c5f1a7c6d26ce30fd60347da0f296e680cbe22c93fb1d5c795a49a7bd992f30878eca7969acb0858b031479eb5ae7fd3f41d09ec1ea2c7f6a9f923c3f0903227eb12936c8b17e80a400b94bdd242b2061137fed56d7cd9818c18e35bc3ed605fc254dc4905", 0xe4, 0x4}], 0x0, &(0x7f0000000040)=ANY=[]) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xc000, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='*%#K*\xd5\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='#-%-#$%]%U\x00', &(0x7f00000004c0)='^.#\x00', &(0x7f0000000500)='#%\x00']) statx(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0x7000, 0x7fd, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f00000007c0)='./file1\x00', &(0x7f0000000800), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x7f, 0x3) mount$9p_fd(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0), 0x4000, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@cachetag={'cachetag', 0x3d, '#%\x00'}}], [{@uid_eq={'uid', 0x3d, r1}}]}}) 23:20:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) [ 437.016485] 9pnet_fd: Insufficient options for proto=fd 23:20:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() getpid() pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:41 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[{&(0x7f0000000a80)="c6", 0x1, 0xf63c}], 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0xd1, 0x11}, 0x18) 23:20:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 437.219929] loop5: detected capacity change from 0 to 246 [ 437.258234] 9pnet_fd: Insufficient options for proto=fd 23:20:41 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'bond_slave_0\x00'}) r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3da52ea3c0428236d8788f69ab4ae8645102348d2b82b728c34ea2d64754fc6212ff7b61d004542231404e891b1e1e42705c72ec3a32b37a9210e5dd3e74364f6c9e1e99e689022f8ecd4ded16aa5c2176b4239b8a313e71f85ba1cb5f897fa821eb6ec7e8ca1e3659fbe8d6813cd23ad77371d5cf535624ce11de7ace11b8170a62fbe41db2e1d09a34f645ba3eaa166e00000000", @ANYRESHEX=r5, @ANYBLOB=',\x00']) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x3, 0x4) 23:20:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:52 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55", 0x155) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x2bd) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000100)=""/38, &(0x7f0000000140)=0x26) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65302f2e2e2f66696c653020002000200020000a93d6ec912ff13599f216333d147d3da799832c93de88736aa65a36e8687c1e7e78d02c9f0ac0ff070000000000009b964ce88d876eed3dad1bb78653edfefadee8d96fae9188bc9e9e42665b2065177b215381f9034f8af6bf2442d498f4bd8721b481bcf36bea439b9395fb93b878d0c792f2a798bdc3da5336c45d7fe1b30b0165748c1d3e08ca36f0d8b7a206f1"], 0xab) sendfile(0xffffffffffffffff, r5, &(0x7f0000000040)=0x7, 0x9) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 23:20:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:20:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() getpid() pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffffffff, 0x8200) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x28, 0x29, 0x4, {0x0, 0x200000000000038a, '\x00', [@enc_lim, @pad1, @pad1, @enc_lim]}}}], 0x28}}], 0x2, 0x0) 23:20:52 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', 0xffff, 0x7, &(0x7f00000024c0)=[{&(0x7f0000000400)="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", 0x1000, 0x4}, {&(0x7f0000000140)="2202cbf05af7341c6b6ec994a27536f4dfc0bcf2749b54f49711190be7c0ff5978b16dce4ef47c8ca19e13405566fecb2b49bb5a03861abb4e55930547b4503106c27d7c6636f6a580e82a2c5fee98cebd6ace8c7709cd902ed139774ce75dadb91e8110c32b0755391f778b5e8260082e9a577da1840b0e8a1e3d99c7bf76c98257de473d18175a893ffd7c5f8b08251d4e0b63c0a513d3ab09cd5aedbc", 0x9e, 0xffff}, {&(0x7f0000000200)="d8bbca56449cc7fc669ae98aa303c44d02b8a7c818f3099cbbf89a69a97e976a2fe8a98324cb30cb062f89c0361b9dfd12127e8e253997a70f10a48455ffbdb034cdeb449a6fd0643d78cd321f03560f1bd2b6a51a49bf4be00cd150de7f36d0e0f235bb38409a907b2bd7ade15de4e0b081ceaa09a16acab5ceeaa4e15d2818f9877260bbc45d5befebd1924463fcaa15c766095533c314d11e0fb19c4e555fefe636e2c9bcd9a9557e698aec827cb2eb14c65de79408bdd6840f114e656327d1625663dc6b2189d95ebf0c36b4d72be57b9291cb67011c0d410754da883d0f1b249c6d185fa3659b909ad8223e2dfcfbf637cfd9c4", 0xf6, 0x6}, {&(0x7f0000000300)="62697572c82950fc5386ee6f44be2638f54207bcac5e7cf2da77dd385788f22649ee6f75da891aa067c11309e270b48daa5c9b458c7c7cc14471852dad6762a9862589b7ea8f2f8b579da27934ece8fa32ef73ad695c4cd20edcf024587c1f25b1de71ac9217af1e32551c3463dce29939dc96e318ccf086d05b1e", 0x7b, 0x8}, {&(0x7f0000001400)="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", 0x1000, 0x4}, {&(0x7f0000000380)="4ae15fcfc987ed9915e022916161e466c4f0a555111fb0e0902ffe092fcf4a16a8a2", 0x22, 0x2}, {&(0x7f0000002400)="07ec8f88c1de35e6a94b7871a012b9c85e6fc6e10c6d7ffb0f3b653bc7b404e14c381c29555ffc90cc8501dca428ac2a032c03910156d441920073e274f8b58fe969a4bf8d013d0e35b513cc5855ad3fb13de4a9dcba54d2ce6ca8f7b4846219dd1fdbbe4eb608588ac5a58fbd74f3b29fde10454a2c73a483dd2ae959e5aee511c8df03524bc3fffa318c11746717546ce90ed2292d9505a02b4afa091665216e88db81acfbc93ab116d0e7935ca1db7e2126aa088e7825df", 0xb9, 0x2}], 0x1003000, &(0x7f0000002580)={[{@huge_always}, {@huge_never}], [{@permit_directio}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x170}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$netlink(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x7def) 23:20:52 executing program 2: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fork() ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000500)) mount$9p_fd(0x0, 0x0, 0x0, 0x64004, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e73801c45b98a18857915dc3d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB="2c96b229b56fb6", @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c6673757569643d300000c3003600322d633900662d0033cd632d003663582d00370039633700002c646566636f6e746578743d73797374656d5f752c646566636f6e746578743d726f6f742c726f6f74636f6e746578743d73797361646d5f752c7063723d30303030303030303030303030303030303030302c646f6e745f6d6561737572652c6d61736b3d4d41595f415050454e442c7569643c", @ANYRESDEC=0x0, @ANYBLOB=',pcr=00000000000000000033,\x00']) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60001) fchdir(r1) [ 448.528296] loop6: detected capacity change from 0 to 255 [ 448.560856] 9pnet_fd: Insufficient options for proto=fd 23:20:52 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101800, 0x99) splice(0xffffffffffffffff, &(0x7f0000000000)=0x401, r0, &(0x7f0000000100)=0x9, 0x1, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x6611, 0x0) 23:20:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() getpid() pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:20:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x501140) write$bt_hci(r1, &(0x7f0000000140)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x6}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYBLOB="011e93d6c26e50be7a0e75383c4dd760877b9e3d6cc690e9580914bfb8cb8ad4a0b99eb93f15c2a23ed0", @ANYBLOB="1ef8b0f58ca8d84d8f8c0a7e22f4d64b9b0810a146255cae85524773b84e40589133b8bd5e604af3e99d415b8013ab636ba2abad7d6401a64da07fa4e9cad9693a1b56a354ae391d7497f4025a1fa08ee9b3f55b0a4ce0254a5ffb41365985193ce126f1705a2204f7fdaecdba9e58d56b8b"]) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x4, 0xffff, "fe4112", 0x1, 0x2}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x1000000) [ 448.800471] 9pnet_fd: Insufficient options for proto=fd 23:20:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:20:52 executing program 5: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = memfd_secret(0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r10 = getpid() r11 = pidfd_open(r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}}) io_submit(r0, 0x4, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000000)="fd7c6be591eb7d93c618608b7530719f240a334c41fa4c7b57ec54e9beef3c9f52b84abd034c839a17834aa975e8d5", 0x2f, 0x5, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x5, r7, &(0x7f0000000100)="5bb75829678bd4af7ea2e36de88ab704836e43aa288fb861ceba9b27196f2ba7946cf17160e99576310f6a86849acb6e707a7688d40c5c2e39ab378f4a6c9b2a5aadbf790690f1963ed053b6b442045fbe28cbf5ea4f5a8cdfcaa2e8f2e7402c85699bcc9b33", 0x66, 0x401, 0x0, 0x0, r8}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000001c0)="d5ce0de98725", 0x6, 0x20, 0x0, 0x2, r9}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f00000021c0)="5325674d800a291d5bc5105ee65e83b9542d7f87b5c5ea0a8e1496e61cb9ce3d86434adc723dab39f90eec184c60af278aadb9e75216c3d90a9d394e32a2a54bb324a6c4810fcda2023d817697bc07f38d871d72791053b1e001d8bf3e1833c948838376c0256c2122c3495dfed4ac67efdfe92f2b1f4e641913959403168c7394d876b39a361c35ce37cf72437adfcedf7a5625fa793593d2be46108a6d2ddc75dd6327c09145f5bd40cef36388218b806bece5aa553f1d8500c188a08e4de3080bcd6b13fa9d9298dcfda94b008102f0de0628e6c78344f9a7ce0d35058f3cad9627089c3f15c52745a330d16c6beb017c4ca6eab2554a95d114a2dfdbaa06daa201bab2d0c506e1866b4a335d395ac4bc98afd03772171c940a29fa68e0894ceef4fe628b0058bfd6bbf42127baf3d23f881df2119690ab0b2623b01979c462a179f8cdf317d4ea72eb1c3d323e990bbbc39df7b6287bd13ac4f5e12693a4db19f4d5548ea5b43508ad19877e340a01cbc2737acb9c31c40d780bf77183721a463133c4b3f06143743d0a0da47020ecbe00b578fa95e22ec457ae2d57090cbcc73f0f6f7da7036ce42e360692265547548e920ae898441ea5a32d9c48a8e1d23f85f4681c2372e3e39f530d206fd263f086cbce70847082e5c1de76d0662b929c34ddc089a61aba2502edece7700c584e5db9c6d56b8362de33bc37568f5fb492d626a1b45701252e74a70b6285bead6eeb1c551a85180a58e850dad4ad43c4e69fe7f6d1be8fef5c1f443a4f446b1c688ed1c52ddd1a99d8c897d6eed1f2869be4390e65d69473d2ce541354dd9fd229fca682bfd71836919806c27ff592bf730943a721d38340e299aa5465dfe7d15aa0a99a3f9834c8ccefcad256bcbb4e4ba735b126049640b126c46ba7990d20d32e834a878cfafe7cc370acb2f02345928381c5469c971fb03bef6a354a9794d93ab91fc22e880545a46c4f395b6fd9cbca4fb87609bb086803a20248b097c0bc6eb013b7803c867878a269999304abd9a42102eaa552a852580558569e45a6e9c12f56f61c78d900358c5a19c4e6eabb751e4b0bca29c331d1974458e110caa078817ce1d2dc02e7b6143659468dca7ad9ff17f3ad1ef5080134515bd69d22cb0e85ae7916b836bd6a544aca8cf10244712a10dbf205603c089a0442d9d26ed341cfeb63b06c668875ad30be5bb741d3e4ae7747c6b89fa2dbcc63fcdab94e5822da7b1a39ef184b0b931334ee2bd6c65903359b98570a83c010f28c498efad7699a4747b6b0a266d5d7dee46bfcaf9acbfb76615c766cea9900a3eb4cfcdf082f7a38edc26ed1e4a51d15fdd926b089af8f47c5776391b35e2beb83445d3a9b3f451a55a8cec88073fa1485bbcadef1ef32630418c3b0c4828547daba80c2ab8f1d1b98ccd3170000865d62625a0de6f831acfefa895c07363b1f816e0b3a784e7f06e350e8ce675e6de0ed39b44f5095e09d9f54b5c0a13bc435a52ca97e5046a86f9b643003b7e67804b787683a57a8cf0f5494d0dd39aa563cbad7e44060fd37ff7c5e55e394f83ff093a28e6444f9e3844365d59adb2f8110b57d08262def3ac9fd5fd01187f3b6a010409fa0ee3f18ac3aa9284b379046e358a00b9364971f3012b6312fd31b97ffc37fd029df1077ff1ddb2a8370bae82cbb833d26ab404dbb4e7a930805f05c80987d0c6fe94cd79c0b7103506b8ffa82f5e4ab8151324acfdff93f30807e3181a73e92a9e2d1f06b1fece880ef45dea1ad92db9e0c7539baf0fe164073342f3737fe0012452d5463b730ec8352ef6abba7f9f734489f17f4db86ffce007385757bf047d605c807f6109e5851d10960b59084fa70be01a8981ddbdb2e3843a45ec8a9d7832271499315ee0c825cbc3fcea2fd2d52fc86fec52ccd6dd113c5056f00a0c1a0b57e4842c9a52286b52c3d98d2a36d2fddc676c5561f67bd51f065da56434783ff2d062d761b54d912bb441277ae636bae74ed92c3f2e0e6b58cda106f49a24f048ea8fa2318176e386d1fd9d995eda36baefbdbb08a42b2f91eeaa78773c5110a5ab89481061935e3d254595b52cc6491c4c7f1d5fa894e5bfea22e7120bb71db5468e5673704c3f09170bdcb36396a127c183721d08e4e55c724c30daa42756908eb9a16676b00da74d71a8433de0842c06542262502d0296f056894cea980e3d7e6dd6b3f17b32d2c5f09b9d82be3154ae35c9edf67d9c5cb1ee5705b62ec5ff065acb0e18c9fb1bd8a7f18486c83123f8ce160e9050c83e219a131fd0a134a2d33fdbfb52975074fe586de0bdb3aee35842c93b27389e4220c2ad286f3bdc4be63151a0ce008f815250b0700c297caa89da291a61f0bbf8bc0fb99e0e8ba137d84422794d019900cc894e7538a024d3b8e245879fbab67775eb37c67fa329d4f323e4186241de27a2ea0249099f3014423b5f45218a1289a726599faf2baa4aa71019bfe46c1dfa2e1facf7cb41f09fa857b9c9967d8de8890333c9b5f187a8a7c36134c54fe083ef3df474bd0edb6b7c33914aa6f71f137f4709891a2c8551a5d71b329756d6023f1fa4d404ffab32ea6c6d6ab6f98325ead06484c810db506b50349875f571ea46dcc784cf96e6199ab55abc62200d4e0f5c27e185bb2b067a344124c6d58fcee9dc19a283252b362220e83bf842ae98dc4607626e2e002f62c95cbec04459345d89dafccf7b1bf6d5681f1f63a184c9d73edb5de83e409143bb3919e297bc8fe5a63f8c732e5411243b00f9565e3de967cc835a9f43f80967e58ca7affb1d7a4103157e997d7f81315895ea843760e475584e36b149920087299d0492b2b5d6dace913fc65a12f913d35f47be4fc4db9b2514471ccb9aeb2f4a893b3079f46fe6169c92a3fcbc776662cc055fe4d1cf3e57a530c5cdb476f4c45402edf534345904fc264f6348d1c0c326b3d78d16b0252621b08b22a4e1b140efedb6e6029a21b793d81b79489cd3dd7d3d7d5b51e42677a76bac263774d34c1bc17c7fd74abfb79f55c219e7316a9c969141d97c70156329044a9162a993f8d4d9b73b15748977e38a10af82ae553cb7432c5c911b12a49f811b956a1241a06637e95ecd6d71c8c362161952496f69b9c97abad5ee29f8b6103db7c12750f0366390b6d32c41c5ad410e3e37505c2120a3e04e4d4e4cfe2b84aa75c955b292f953fb13b8c33535c85a503de41bdaa0340ef54ebb61d6845cafcb7791fb3d465c9c4947508154e9aa4ce741af53dd74d218f5f6e17a4b1ddd1c35cdc1afab5a7b2e573e0c84b940a0bec005d1f6a24409859cf08edb6aa2949b41f9adffe1ea730b2fe57734dfd21dfd028bc25d496b0a765b34ce8bad658149d9a321e0504502328d6def31122aec546a8791a3b87496b2c89b834681b940b982576b8d0875cf3df817dbbb8fba372df3f5c44d1601538bc33a50f044fdfcbbaafbffee0e89c52d389e36d7e7da396f2801af04d79c6cd857e69cdcb999aa592d412fcc8da08e80aefa79bfba43ab493558ede358393c2eb64f4fbf7249381b6f0e5d9a19a8dfe0e839729ac817eafaffb66c9ebdd1b25d057fed80021083b088a0df37d703ca1696b1dea1080610dfce1f98b6264e3fb2fa8730b84de8344990ef5b07395a1c72140371327d608c7689b55ef2f831450f55b81281ecf78761f8620659104f589c3842c7599a0be26af554f2c1c33122215ae4c11269e4193ac89d76e197c2963ae05f94b4a249f83546862a88532c4a62275f2d2d98c75bb2221efe86780c8774b7fcdfec4b8def901cdb293c503f39a6bb0ec800d1b16ac250a8e7758df5ef1a71d5d472b7e8c61824e388d3bb7bc742788a825d5f9f45e5855f768240f36de9482f215c9458ff7c7304729a692431c06a1b6a8f22d347f5ea980281ec2d12f359cbb3c92755d358caf1bcb2d6d0ec0c3d8944954f6799068069d8ae4f24099bbbc2dd5f58c572a9c9eafa3e9180dd34d16c9ff8a9ce265e879f46e9b65ca1c069ddb3727dfb293277c83fa73869fdfcb05141be30a8e526ec530b1195f19530231e8b57b7a541d79fdc7de109544e4deaf3a4adedf6abade2974020082fdd7b68ab7625fc1431008c67e1445669eb9c31d1d9efd28f563e030835c5e2ce4aa19023e3e66e39762bb7f415a0ca7182146536d84a9ee0292189cacb1b16c34a599c2243a7e2ffbe7d4e12f620e0886c4a4f405171e849329fbb46c3e928cdbe44a067cb94784be3b06d17032ef6d7a62684db75b315d50281c3ee917b00385239d845c6fa495a014bebaee518933fb8d62dbacc08c714017e44cadfbb4c9bfe24aa64613c6f88c6c1183f6ea04aac0c617258af96f8f32eafeaf9b787df10117c3f4b2c5a4c45175bb775829f12e28b581fa98d25bba6069840d5625950184ae62632fc19d62b93d4dd48e1c8e3485e9ab000ae8d684b55da887f0444f4d37ae50fb994bcb40ec669cd7b5d766e37d2c7f29953c40e205dc1ffd77f2a9e72ec0f9fb31447405ef5efe351fb3df737dda069b2b5c0dde59b6e8dce5d35f0131dca573c907246715b1e867c8c9e4c48e4954e5d34bd8bfc3a770ab4f49df386c35ca9d3f4f3bbe07e7925d5df2715632fd5a3dd85546bc40e05df6b9d7b3b7e5c6e2364c7b130f5652f5ced1ae1aa49df1d38a056a8bbb41c51f4c324730e824a2aabf22d73e19d2c3651dd9e9b3713de76bf2cc1b0dbb56e4c109eb1bf93a8955480a3a533efe86f91b45d8410ac10e08b9799da4f2d843af1f3b9f76ecc35d5e523c372b48b8efed189fd88392a4c14787f7ac84b716f22243eb5f730fcfcd40a6d9d6ff742eae52fc582ada5d5c2184c519fb23e7ada5d5e09046503c310083ca5b60bd1bf3762d59a2f8ea7848c6fac60e16144f02585e232fe63913f9c67f0cee50a7d662fcd3b4b0baf669a3e6108cdfbda7e78f22f3da5c6ac84be29c45d30c47330d1bd0cb6eefbf95b07ef13053e73c3c773021e71715babb1f56014c00987b3e39dd1ffb609e51c67fccd82c1a50baf56a15a26feea27f831b4e4936b3f8c5839a86a216a64eae404fb7adc996b0d6415cd142ce77d25c6c758e5588ede7ac13a0cbf65db6313cdb88749df1a2ff666cb08f27a337055d894490e4ac8c16e9413a93ec02690e8c29aae751c039fefcc39c89cfd439c69a8d4d52860ceecd0b737c438304a53ad5631ecf95e46631d2458fa718ac0297d0a8cc5f74e47877de9fe83922604c38b9387f64e7817e622ebc777c5cfa3aafc88debfdf7295df6cfb4770840a632b24c756d98e2718017d6272b8cc0a45aa5f40944a051360c252b88e7d3f5becb8f34d1acc80e1c6e6948881512f8efc8e5e2687cde3eeb2b852cb042678f201d37c8992e9c3107e72bf4891d939407d84672b0c7b1a97d9fe357de5c80c78bd7b76b6448a9989e1c87439d435d2e13c1f6988d78bced7767d50011ff64b8d42cd4c4cdc2a88cb0c5c53df2d0e0ac53536f09ef936d3a7f27ee7b7a7c07e11d7109b4782de281b837918175fd7c590b4e9c55bd11cf8afb805bd63bdc6f4c35f113af4efe8b3af2febae9182ed328440d9155ce9ea724ddefa184104416a034f2dbd9da69da672d5e161bd1782ce8429cecaea5fbddc23abeb58d77746769749913335b31ad447f210a7a87cb692a849192265b443ad9894b56174b55d9dfbcfc857f526665241750074913368da8d64e11e07002ad4cd877cf26647b8c405292c0d05bb143d904f942997bb39bc5b35003", 0x1000, 0xe000000000000000, 0x0, 0x3}]) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r0, 0x2, &(0x7f0000003400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x8, 0x0, r12, &(0x7f0000001180)="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", 0x401}]) 23:20:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 448.994545] 9pnet_fd: Insufficient options for proto=fd 23:20:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() pidfd_open(0x0, 0x0) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:20:53 executing program 2: ptrace$setregs(0xf, 0x0, 0xaf1, &(0x7f0000000140)="06365f039acec1546d2587166ca4d1f227c860130eb4ff2ed486aec69bf64015ea749bed8ede15") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="f84657041ab3a81edf25190000000c00990000000000240000603c23f0000000000005006000db000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)={0x34, 0x15, 0x1, 0x0, 0x0, "", [@nested={0x23, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="8dfd178807e9c14f81b3770fc6fd57eb68e153abc10dc3", @generic]}]}, 0x34}], 0x1}, 0x0) [ 449.371638] loop6: detected capacity change from 0 to 255 [ 458.736419] audit: type=1400 audit(1754608862.717:20): avc: denied { map } for pid=5700 comm="syz-executor.5" path="/proc/5700/smaps_rollup" dev="proc" ino=10618 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 23:21:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:21:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 23:21:02 executing program 5: inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d3d439801aac7185266a8368639ed40797f5c4b8b14041c066854b2188c4a2db3d05482f777aa64901a555ddc0333bf963c4739ece424ce77695749f0fcb0417b94f924", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, r0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) 23:21:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() pidfd_open(0x0, 0x0) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:02 executing program 2: alarm(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x2, &(0x7f00000001c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/selinux', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000000000)=0x1) getdents(r0, &(0x7f0000001d40)=""/4096, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="646e6f3d000000e0494f06fe601e24", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) poll(&(0x7f00000018c0)=[{r2, 0x4230}, {r1, 0x1310}], 0x2, 0xfbf) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f00000012c0)=""/130, 0x82}, {&(0x7f0000001380)=""/131, 0x83}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001540)=""/96, 0x60}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000016c0)=""/240, 0xf0}, {&(0x7f00000017c0)=""/107, 0x6b}], 0x8, 0xbfc, 0xfffffff9) r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = openat$cgroup_pressure(r0, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000002c0)={{r7}, "808335d3bb6fd0e66d8e8f2d6472871496b6accd96e744f6ff416ebc9c683891561a67bc541c5cd1982c78dc411c597c9903be8bea7a2e8a65d4e1d884bdc0c203122e7c366e721fb07b671168186ba22055833812bc42df2e9611f1d388536a38c4f383ce5e039aeb0c7c2baf20c90790a755d8f8009a7f4b4301f235cdd17a5835aa76393f8491f67b1e71cbaf06a8c87fc549886efc26e02cb8d418e7356e67364c1eacda5de199e9134d14cd79be3733d593991ecb5cb630ad83eee593ac67ec25ba5a1b5fcbb4ef959a4ab8c1c9a2c56dce08e5e196bdf96e9a50c72ba11194f408631ff31d7bfdbf113c14424e80c4de4fccc99071809ec56b45ea452d4c9949c3c960705d9f50996e36347ca71f8ee763487a54338b0b51167d7e2e2021d766e9eb495a849df625d1697b7d57cf79c3b5a49ce9d9c4f0d840f7895d0d87d8b74588353241babfc300ba4aa5b69156a47267a6fea95b51a59bf47f9a6ee88da5214ed51b1e78dffe1856c09a4ba11aba6d077eb865a8cd193453ceaf19ecf7a1cf4de570ef06de91b111f0e99ef1167a023042390798cf6b7e20985706f9968b9c3ffb4f39f37a97649de649b93290134d4873d40673b52eab114e99964aa23a28ee590b872bead523ef817cf9b46f826cc87d4a78bbb5bde63c25d349729266b883bc6315bfb144e53cbeae46e2fb92270fd564d1c21ccaf701041d0c54c6185459160a81de82fd127e496bcf5614057360a144892e8102df70b54a397da59fe4a8347093c509e8116d4864a498d6d3a173256e8924f9972dbb4a17cce236e50fc2ca23574499174a61be6f9b7e8632ddfa0fd96e3cc10afcd4b1c2263ac72a5fe2378d6c38eb7e090d7c933125955a3b0993cb1a60e79c9a808e52f06508d60f896350519121a95a51ad4a481cab828c4a7c70d6c3e7b7156fd1b3edb02093b170a262e98200e1d4978c3a785b7dce9e5882db7dcf056c6aecf051827e2613e2ac4b0ec013f0e1decbdb56293da07b322889d857cb2cdd0af1c1fbd52f5ee6bcab4d0f41f3da26889542ce9bc938dcee2680e2444278865ccd722c167d2f1a3f016cb6febbd669dfc57ac354402a5ab1722573c1b18b06ebf812f5d2bb7ccf608fc06cf979c31c4c98327fedffeb74a7ca8acb2d8c34a439d999ea75398dde36c16742ea86e30bd442fd999890c086b1d8523ca4f609055d34a7ecbb35c749fb3d6b6c79bed53040315059e2b4212a72da366a18788901fc873c9cb5088c7e45856417691185b80515fee5216929bd7aab733c15416a61a1e3aebad220d3f00bc17dbe2b9586e7715f158845435592fa586f4cbe3b289bd65331fa2306009f1d7374a0535dce1ec22b863bf29d38941b6165b0b78d2d2535ac7bf44220df6fc9189978df355cdeeffbda5fedecaa6116fee455a7115f584620ed49c83255d51bea75b9d6bed9dc2343172c5ea6917c62b3d6732ab4e9827b2e5e100df77a53480a7dad9eac86aff56d750caa423ee897ddd93828af36a959726b7cf28065a3f7632d9f8bdfd119e1f788dfcd71ccb4ee0b2538050651db0cd9600aee5ea815e0c7e3d41a27f31c83a69f7643d03a3aaa9d82f49afbc0b5a0f67c8ad6875406d3a74bc93022609b6f44ece0358bdc2ef16bf3ed3c62a8b373502dcac8574e387f45cfcb81ae58b4c3605349385853b1ea1a9bebfaeca083bc22223bc20d6eb57532e5dc85a9ba31a852e76320b9603ba9b03f8e013af9689e517d76a0fb74471d7fb1b642d8378876e2f6c310eda26bb946886f3bc6ed724dc1afc7100d7f5bd1b960ced8a7f333f0d25b65a44601f32d9dc5f389db2b44c913959aaa85ba7429adc196871a95c74d5684884eae72ac7bd2e3d478ca8a91a0b6684a3c0828fa94e5ec1b2b03d5bf3f9c4107452a5c54ca774671e103662ee753239e5dfc8c0bb65bc224f3db7031a0879cb44a18b85988053aa486a62ddf15969c7232bf9f9ac96a0a7c6e5d170d4dd3766a89c1fbfbd05d73785664c69975092f611ac26a12ef58aede741f6e7df570e9c55b89deff11d28174c28bb4b6e96a4c0f7fffa24fef558614aad01ce0b40c7b04f0e437e08fac9cfd540eabb6b9e5ef9c6bac37a6c00dc8a89f87f2ff7d9c379fe0cab9eff391bcc7f7ac39d96c259cc9e4e4deae2d3604b405c2ad5fd26249f40b65a079b341061e0a0042c98721cd7f6ba4e51e66a13e185057f9ee6f504f8838e219d5d58e5e7824b540ca74c84bc7a92d1d3bc5154ac20ad4a9798d7b165636e6693ef9793a932d8b5c1cdf2de5093a9bff783f40311c30bbe08972ff7f8244ef78eebf8ccfecd8dd5dec5fff97aaabc56b016405b2d9510c55224c8aa346b470a73778a3a2322ba4077180b94f68eaef65f35ffefdfe58287ea791fde8fcd3e677591d1591b3e5c5fb7a56567bd723039ebec7f4a69c9bb5a7385c88e18fdfb93a4dec714a210f6b85bdd73097528c44ea0a88da75cd1fb5aa1bfba5c6242848da2912b4fa040a483a664fab67fff72e023934c25d3d755061fd39bf6fd4223895c9c8c822fea0a5456a81f49e0b01791a15ab981d8bc8c432eb1c6e84ed38cce08ecfa53040534ac0983fedc7f083ac2a37558745a0515c3db6ac6b8c5cb54c99d6814e858688f847f63a3c422663b5423bf75a48133b20bf4cef3b928a4f3b8e2d160433bbf85bffa99d07992a07ff63a29c802357076da5ab43e488e6581e71e7d347da2aa3db9ef6d9b5d4df4fdd6a3c1c64bfce360163470ec1c1959247442f6aa66fdf02be5765fbb49b46f85ff22db4df39858f55f69c01f30ac6f0dc5d27c402992c43c895bdcef8fb134e7f5403b8f6eeb87f2779d3904d9b21138840bb68fc53cc31e64e1f242a07e0e7935ac982c0926f2379c530d73970c289d52e140bb6361fc829064a6885ceeed4c487841f4edccccfbc86fa76fdf88eef395aaac14896729a737aebd00b0bf09a7073a19c974dd0c746493e35768ca7ba3c9b1dc8114e3c4d8b35aadb4834714193fac60d85028b483657195983304e8b032ff67dfe7952137dea466ebdbafe2f355af4cf551d8413f24a6ffaed8fd20d20d53830faf9470c473719748eab3114765936fc1d0ae5ff4d542b71ef0b0bc6b81b64b557f8ec59921e4374f4cbfb3092bf846f9cc2a09ae248c9657a36e035714db1ba84cc1262ec42569b999eb68b5bddc12c76dbea3998ebe247713eb083f6b6cca75b291a5d8698f98ddfb58511797ba0b965fbacf5af8de01c0d27dac75eec78df137377341ff31c86521194c62894f608b252d2d5706263d34914aea70e1274f66970eb38547a5d2b0e4f84d3da44e3853715b527448e76919630333874998555969b581901ac99e99c7684d5bd75d0e0264fc48dae886f694b1d56a9d65dc28e3084a2308ea0d80df78e32c7a619db8f9b894116456807b5f3abf3cb0fc4299aff9571ced38a895cc1dd137e37572ac0759b4ba44afee38400eb607dad4dda8482a492dd46448e68b4166fc009f413befd6b330d19df0e7f077e1b36bebfd689a357bbfc9a8ce6d1ffa53edf9813ea32dddbd47f0798853a2380f7d4fd42b00907a17fc5d88fc5971c518d8dee32d33166295f1cc1cea7bb4e7448cc56a8e6462944fd6b4c158894b7532039ba8ba158189803cd2bbbf51091180170234f58f8a2df959b6a2d305cce5d632dfb12ca6be422ef12b1280aabc62f630c1395acdfd904479c7663b2a1997617c6933e1b46e805bfd1df3184d25a5fff5904d18186174518ee94f8f0f53839f21b305b7c116bfd535fb78817d605867e6b2250db23260d23b591313913c1e445633fb060c1e8d05cb81711bf00e968974f1a55203c0fb2e8d6d9f4da2cb9722cf477745a60870dedc9345f9d129802a273f0ff7111374f7eb1f7604dcb3a06ad5190b28e2ba6276aad460986d360d1b25fb5d144e52c25e71cb6210c13e554946d2e333fce13eda1cc1a0401b5a3271746a952e82b295283f23a05429b8749a4da8cda188209c9dfe0b3157b03cb978991876c4525242afaef0f82568fae48a35c4ee57ccfd48c192e874c75a29b7fe159e4c8ba2694ff8076ababb5ea614c40dc88b44f11da85f9f72a567fc0c8743e75b30b1d2fba603adec5fbb8d6e3ef2527eefada34d9e91a8850f8cc3a0ae6e0012ea552e6815635a8d915b325268a5958af05d61339db35674308c3cf43f41db9fdc506f75d40e95e64b0fb5c776e3d55c5ea36468bd340975e495e254a0f1b03513a038ae5293e7b690d6d95a1caca488dcb8f0c9b7966c419ff1540762dd1bd15ba4d8ec018f53e37d06647b07450eab7df92ba8077c9321b9aa50dfe46d242ba09b8c273a6cbe810a86cb5cb13e8213bbd10e5965d5f9dd14884491aa37f639a6263bbdac4c6796d99e77aa9097722a5729e2301f9aa028895bc7a0fa61ca09fffef84705352f2be4ce491f3290cd08cb8f9204ff41b42445367035ea91997856efa7856d8f0460cb2eb3613e9adf801546336c8bd2e6699bb0c49efe45f487746f27c136e8484b681549b986d14dc14f81037097169e6d1e4c07a558a976dee5be4af178078abcaf6a95c465bbbb0f8190beffd1c12c890e98355bb76c7412646704d8ca3c2d58f4f3e965e3c2b4c5ece4b6e883888f50481e4731b1f36ec9968efb51abe2ef8f55312d725bb91116e767b355e1cd00c50f7d150b048c36a40d71ca16d694ea326f5c65e7f2b3a4ab7156a3fcf606f0048aeba05b86d86d821adcf4835150e57fd1e14bf4fc8f41016298d0ae245720c82f46c484b5b682cf3e957cb48e816612395a9a2cfa4134bd4dece037112206cf6bf0187b90b6fb62274e32272d3e6554787efee4d0384a5719df1044236b9a45c87b6b6ce9d7b3564477a8861c2ad3ee8f04bbb919341ae2ef315c6092d9d0bd12c23ef1a79c7f8a5ce1ea5368ae8149286ce21c696661f213d6dbf341177a2024ab772d085d16ebb1548c54f37fbd7c448bf6744e09eb63b007a4937a62c13cd5c89487d3f3d59f1b0b5cdc5bde0620ab7a60bfd7578e5f16f7c28914f267200b92356cb42758ed6746dd875487b35bd4b5448beed9d8954761ea775ad00adec841b116e9b2e8c84baa04f690edbd90eb5435bd082b613a4b0b96ac19cd92856135f8aec21850aca63b74e22d883aadde93c1dbc9b461f0c86a4d743111b31fbc9a2a8e8a1e7ce548da141a93dfa31156375cd9ba12cab73335a7a7fd271b89eccd10991cc661f08d459cbc908af273d43025fc046bf20a7036a7b820bc535d3a56a5b61ae33e0ad1d77861a5b1f5c58b5bd1718264953b09eee6e9951cc2d67f98a2ccbdf2dec8e1cb5c49825578455ee80cb5b7e7dd2c31f4c10827d9e9493d092af4ba42916fc2e7d8eb8bc2be39421f721b6911c525201e7be3f2ea4b146cb32fc9595e26640d61e93a909fbf168aa1569b187f26da7e1636af588100b1e41a10fbe862fc4cfc5c4aa4b378290fc2a1b794d9ae78c5acf292887f203e05af2285f7b066f4f7c9366d429ef95cf7b69ea84467e32f3804698166bf2e5d3a1ae39ec65800586f72827114191b44127c22822d323eb9fe3becd71a1193d42dfd0682d3b217a4d58427c908f8e2a6ed7b28c20d286dd7c4896df3c103b15321baa8b4dbb2872b30afeceb264986de9ca7c4839ff74fa08bf7b20e9983ac8161b5a3d772388dc6cc894c1614280a714b457e8d73050859e897f21f8fa52c9b30c0ba44f68d6b4e21a3ea7aed32fbb87"}) getdents64(r1, &(0x7f0000000100)=""/75, 0x4b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x100, &(0x7f00000000c0)=0x5) 23:21:02 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='nfs\x00', 0x24001, &(0x7f0000000200)='\'\x97-#/\x00') getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.apparmor\x00', &(0x7f00000002c0)=""/173, 0xad) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 23:21:02 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000bc0)="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", 0x155) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x2bd) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000100)=""/38, &(0x7f0000000140)=0x26) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65302f2e2e2f66696c653020002000200020000a93d6ec912ff13599f216333d147d3da799832c93de88736aa65a36e8687c1e7e78d02c9f0ac0ff070000000000009b964ce88d876eed3dad1bb78653edfefadee8d96fae9188bc9e9e42665b2065177b215381f9034f8af6bf2442d498f4bd8721b481bcf36bea439b9395fb93b878d0c792f2a798bdc3da5336c45d7fe1b30b0165748c1d3e08ca36f0d8b7a206f1"], 0xab) sendfile(0xffffffffffffffff, r5, &(0x7f0000000040)=0x7, 0x9) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 23:21:02 executing program 4: syz_usb_connect_ath9k(0x3, 0x4ac2ea6427bcac62, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x2, 0x68, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x0, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x85, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x7, 0x24, 0x6, 0x0, 0x0, "b8e4"}, {0x5, 0x24, 0x0, 0xe3}, {0xd, 0x24, 0xf, 0x1, 0x800, 0xf400, 0x3, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x400, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x101, 0x8, 0x5, 0x7, 0x1f}, @dmm={0x7, 0x24, 0x14, 0xf3, 0x800}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x1f, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x9, 0x5, 0x10, 0x81}, 0x10d, &(0x7f00000000c0)={0x5, 0xf, 0x10d, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "6e9ff1bffa8fa79612fcbf9ec539f3b3"}, @generic={0xf1, 0x10, 0xb, "341c9b719fbc70c7a7fa1f11c5eb5a2e3b5e8c0aaf58a00541bca526790dbadad4d3e2048eed6115d7349344b215bccb58c7346685262ca6387e5dfd74dc48f53d5c096f7ce505fdec1993e5b21086d5211fd5ab1ccc21ab84559adbff362180a9e241b18d38f11487c7b96847c9b2ffa269c3f720cf395381716396b6a9edadc89ba83e585e6d8176745a10d02e57871d86d01c2f4bc117c8e1e6c8c21c7aa91b029a264f6e9a8097fce3743443719f6f084637cdb7273f0d39ede6bbdf602679636712b26e8ca7c7a7092ecb73addaed1c6437c356cb98351f5f521873769e93d5c1be9e939b5af710f7fc348a"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_open_dev$sg(&(0x7f0000000f80), 0x4, 0x440080) syz_usb_ep_write(r0, 0x8, 0xf7, &(0x7f00000002c0)="d19a870f9760ea7b2e4c50c8524b5db1b65e5ccdab2825ac2f63cd044d0050a2db6a7dd677ef6c5931dde483f77b43033f2231bbd5a1dd1a2c70f15113d3ff001d8f18aca7c2e7836976e0fc57e5a7f16d6b20f9fcc98219678fef1f1f20f578a2617073e2cfd40dca223d62d42118ce54259767b48995423a908a502de294a051c3d15bfa9903d1a6905da69157c2c0759e093f83ff8df783f02958db12b8733a090cb7e7273d8782493e65fca2e93752a7492fececc249c7266dea3279b8e6992bc226c96e768c3851e2d18311a84917be8b9554d3049a52091502074b6dadfbff65aa8b13b10ad03c7a6db794e6d9b5e05989924292") syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000010c0)={0x14, &(0x7f0000000fc0)={0x40, 0xc, 0x9c, {0x9c, 0xf, "4fbbfd491ef52c48429c9d615d10f6cd8fba0bb9eb6221f84ea2bbc5277d5fc5fdd01f3e5614992f9ed265017a85045dbbc937f1ba6607c82f7eb7fb0408c31c551042d7c2fe1aa0ff2db3c89350aa863c31135ef72891ef43e4da2abd1a2b5fa85552fc84a738ee051897bbd9d863bed0e495ac476192c71eef9c4e72aa5b882287ddd7384c1da999decf6b2ec109c6c8b70ad65f51008858c8"}}, &(0x7f0000001080)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "21714cde46e7e9db8e887b3a1d91c8d6f80567f72c52051e300d8fa478"}}}, &(0x7f0000001380)={0x44, &(0x7f0000001100)={0x0, 0x5, 0x8d, "a88d85c8fe1886740694d5c4089037b90291242a949a6cbe0887605c487c0b4b43318bd17241e02fc819910769f93f063f250e6c9a19f6e2fab27309ccfa2cf52105fa3da15e2e0877f6b1b442215c36afdee121b28f3708be881d589b4f852d96d07a364c9528bc880b18251c459e3817ea7abc33de52f575fecce4a7f978c876d398b9f429b07898cb191974"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x8a}, &(0x7f0000001240)={0x20, 0x81, 0x1, "ad"}, &(0x7f0000001280)={0x20, 0x82, 0x2, '0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:21:02 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0x0, "5c2387b3abf58f4f"}}}, 0xe) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf}, "552d1c372fa03dad3a65ab3ea202ec"}, 0x13) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0xa0200, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x50}, "2bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566b3336d7090da483b85a7eff476ae95f6fe07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c24"}, 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 23:21:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:21:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() pidfd_open(0x0, 0x0) pidfd_open(r5, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:02 executing program 5: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) dup2(r2, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/212, 0x2}], 0x22) [ 459.006022] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 459.041319] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 459.061593] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 459.067917] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 459.069284] Bluetooth: hci7: SCO packet for unknown connection handle 0 [ 459.070606] Bluetooth: hci7: ACL packet for unknown connection handle 201 23:21:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x40, 0xf7, 0x2, 0x40, 0x0, 0x3ff, 0x4840, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x5c028, 0x1, 0x4, 0x5, 0x3, 0x3, 0x0, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xc, r0, 0xa) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/145, 0x91) [ 459.072880] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 459.217239] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:21:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 459.288867] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 459.290928] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 459.292460] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 459.293851] Bluetooth: hci7: SCO packet for unknown connection handle 0 [ 459.311591] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 459.314093] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 459.566329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.571417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:21:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x1fffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000000380)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x3ffc}], 0x0, &(0x7f0000000040)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x62000, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="4c057e68a1d8490000"]) unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/udp6\x00') renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x3) mount$9p_unix(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) fdatasync(r0) 23:21:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:21:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:21:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x9}}, {{&(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x2, 0x8040) pread64(r0, &(0x7f0000000000)=""/74, 0x4a, 0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) recvfrom$inet6(r1, &(0x7f0000000100)=""/128, 0x80, 0x22100, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000001c0)="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", 0xff}], 0x2, &(0x7f0000000300)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x28}}], 0x1, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000440)) r2 = signalfd(r1, &(0x7f0000000380)={[0x3f]}, 0x8) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f00000003c0)={'\x00', 0x5, 0x3, 0x2}) 23:21:15 executing program 2: r0 = io_uring_setup(0x5bc4, &(0x7f0000000140)={0x0, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="8eaae475893e1fee21c53fc7270d1575143e72857a6acdd3f85d0b2136a62d1347c9807a9c6c83d0310dc0d5d270714ae8b3e1c172a615217da28e4a3f5a28df529cc7605f64efa308032742d0f33b723aee3d5e01f2ff58773720286943a0ec9287fbf187f0276114c15d563837eeac34102ce717c0410d8db314", @ANYRESHEX=r3, @ANYBLOB=',\x00']) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r1, r0, r0], 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)=ANY=[@ANYBLOB="0104c68c140600000000000039a7589c8239ad246b2259127b5f395f6581b951d4b39353f6ec02a450d23f5f6a916d00f9dd1b27d710a58d1b2450cf80e9095bfbb3289d2d9481fd6ac45c0cb4df43e729865dbcaab589645860976ad99a9bf86f11c48984f3c36f0b5657eeac3ac35fe64b04077bc924b14def7bcbdd0a2f480c23cb2ea6d9fee0bc9190b69d8976316e31e8f14bf33add19fe4598a6bf84a71b38", @ANYRES32=r0, @ANYBLOB="0000000000000000000000398618d667829f81322a3da8001aabaa5ab3145e419b3fb2d09cac"]) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r8 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040)=[r5, r8], 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, &(0x7f0000000000), 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) io_uring_enter(r9, 0x7b7b, 0x3da3, 0x0, &(0x7f00000000c0)={[0x51a]}, 0x8) 23:21:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0x0, "5c2387b3abf58f4f"}}}, 0xe) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf}, "552d1c372fa03dad3a65ab3ea202ec"}, 0x13) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0xa0200, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x50}, "2bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566b3336d7090da483b85a7eff476ae95f6fe07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c24"}, 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x8, 0x2, [{0xc8, 0x8001, 0x2}, {0xc8, 0x3, 0x3f}]}}}, 0x12) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 23:21:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x6, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="2af15d0814ee47f859ab2617f8bd990a126c2075d42ddbe36969a69c7c2165d69137e09564061b137f605e697fd608bdfd6523c1e234ceadf5b34b7f33691928b59d7d8509163ae88786c805"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 471.316929] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 471.321040] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 471.323551] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 471.326074] Bluetooth: hci7: SCO packet for unknown connection handle 0 [ 471.332744] Bluetooth: hci7: ACL packet for unknown connection handle 201 23:21:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'macvlan0\x00', {0x7ff000}, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}) 23:21:15 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x208001) copy_file_range(r0, &(0x7f00000000c0)=0x4, 0xffffffffffffffff, &(0x7f0000000100)=0x10000, 0xf4, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x8203, 0xd0, 0x1b}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) 23:21:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa15da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x400000000000000, 0x4, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r2 = getpgrp(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) tgkill(r3, r2, 0x34) r4 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) dup2(r4, r4) fsmount(r4, 0x0, 0x0) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000003c0)={0x7cb, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) [ 471.340194] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 471.432765] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:21:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0xa, 0x0, &(0x7f0000000000)) 23:21:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 471.498467] audit: type=1326 audit(1754608875.479:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5793 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7ba4a0b19 code=0x0 23:21:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) [ 471.548832] audit: type=1326 audit(1754608875.528:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5793 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7fb7ba45372b code=0x0 23:21:15 executing program 5: r0 = memfd_create(&(0x7f0000001300)='\x00\x00\x00\xfca\xbfk\r\xae\xb3\xc4\xb1\x8f\xbf\xa9\xce\xd5uZ\xabq\x8d\x8e\x1dY\n.I\x9e4\xf6\xe6z\xe2=q?\xef\xf1\x815\xecZB\x18\xb5M\x8d\xd1\xc8$\xc6[\x8c\xa9\xf1\xd1\xc4\xa9\xbax\r\xce\xf5:\xfb\x00\xd3\x01\x8c?\xed\b\x92}\x83\x0e\xe33s\xf7\xd0\xb0\b\xcb\xa2:Y;L\x8d\xca\x8cgh\xe9\xef\x975\xb9\xab\xbc\xe3Q\x83\xcb\xb23B\xe0\xa7\xaa\x9f\x8c\xce\xf2old\\{\xf6\x15\xc1\xe5X\xf7\xb4\xabo\xd6\xd4\x16\xf9D,w0#\xa6\xe6\xa6\xd1\xef\x941a\x96\x80\xd37\xc3\xe5^\xaf@\xab\x98\x8b\xaft\x19\x86\x9d\x9dc\xf4|\xe7\xa7q\x1a\xac\x1a;)\xd3\x11Zi0U\x05\xc2P\xb5$P\fX\xca\xc8\x90\x8f\xda\xcf', 0x7) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfffffd1f) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0xfff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x10700, 0x0) dup3(r1, r0, 0x0) creat(&(0x7f00000012c0)='./file0\x00', 0x80) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x3c1040, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000180)={&(0x7f0000001200)=""/168, 0xa8, 0x8000, 0x2}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000008000300", @ANYRES32=0x0, @ANYBLOB="0500f4007c80c689ca0d081a98db42b6"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) 23:21:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, @perf_config_ext={0x101, 0x8000}, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3f, 0x8, 0x6, 0x1, 0x0, 0xffffffffffffffc1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x4, 0x12, 0x40, 0x3, 0x5, 0x8, 0xc693, 0x0, 0x200}, r0, 0x0, 0xffffffffffffffff, 0x1cacce5a23f5232a) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() 23:21:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 471.767186] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:21:15 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="55ac0b000009a3dcd7ff89374ce519165aea8d624f133839bfd46a0e33d53f334263003964104bc703bf0cd6c38f23a89444eb9c993f6a9d9bcb4ef4e0b9ace7e36e13632e77392ea08fde3ac8d4cce9e481c4aa704ab6d6fb9da0a79dd8dadf4b113ecf36e54cd620ac70e6343646bbc1cd9a62a14e38036f94f6ee0e69585e2c032d01cb73a4d7032bb7a18f5cabbc88feb2608b9a2e54918c3a3bdd71ad4411edc614aca1f59b57c700d698897df57a2601699f7fecc5d6f9"]) 23:21:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:21:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) [ 472.017096] tmpfs: Unknown parameter 'U¬ ' [ 472.026076] tmpfs: Unknown parameter 'U¬ ' [ 472.098839] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 472.185505] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 472.270457] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 472.327086] mac80211_hwsim hwsim4 wlan1: left promiscuous mode 23:21:27 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0xc, 0x5, 0x804, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x8}, [@generic="bc47697acf98427f0336aa2b7a8b9615485170cec2cd71b87f5d4a382220a82fcbf01470b4353dc8652f9a687f9c68276c09629a985cf92da810fdc8cf12656a39a328b65938474024ad3ff552bbd166"]}, 0x64}}, 0x20000000) mlock(&(0x7f0000873000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000876000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock(&(0x7f0000874000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000871000/0x3000)=nil, 0x3000, 0x15) 23:21:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xae6, 0x20000) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x81) close_range(r0, 0xffffffffffffffff, 0x0) 23:21:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) 23:21:27 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x5100d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) fcntl$setstatus(r1, 0x4, 0x4400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) getgid() dup(0xffffffffffffffff) r4 = getpid() r5 = getpid() pidfd_open(r5, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0xbf) pidfd_open(r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = getpid() r8 = pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x6000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x8, 0x6, 0xe7, 0x4, 0x400, 0x80000001, 0x349, 0x0, 0x7, 0x0, 0x1}, r4, 0xa, r6, 0x0) 23:21:27 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xae) getsockname$unix(r0, 0x0, &(0x7f0000000300)) 23:21:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:21:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="a0", 0x1}, {&(0x7f0000000300)="ca", 0x1}], 0x2) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r1, 0x410, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000042}, 0x200000c1) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 23:21:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xae6, 0x20000) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x81) close_range(r0, 0xffffffffffffffff, 0x0) [ 483.763036] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 483.967611] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:21:38 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) 23:21:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xc4, 0x6, 0x5, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x7800, 0x80, 0x0, 0xaee9}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x108, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKMODES_OURS={0xd0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "fcea1c07c953d92869f52f3aab4f27782303429bc7bdf0c2c8c43e12bb29f95beb2727e1e1730ca79e379420feedae465c4e2d76d355bfc856ba5c6ec9a1637890f6189cd221bcc6a2dacaf20ec1a8f413a3cc4baf59f35929fa4ce6952ab9864c39b89de8512a787f2b8f12f075378f754cd17b2b52f080bb3f75d208992fcf352c16207c55e4828ccc47"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x81}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 23:21:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) sendmmsg$inet6(r1, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@hopopts_2292={{0x18, 0x29, 0x43}}, @dstopts={{0x30, 0x29, 0x37, {0x17, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x6, 0x4, '\x00', [@ra={0x5, 0x2, 0xa840}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x6}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}], 0xa0}}], 0x2, 0x0) 23:21:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 23:21:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:21:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:21:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[], 0x23) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:38 executing program 2: syz_emit_ethernet(0x12a4, &(0x7f0000001380)={@multicast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, '\x00', 0x126e, 0x2f, 0x1, @private2, @remote, {[@dstopts={0x1d, 0x7, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0xe6, 0x29, [0x10000, 0x4, 0xfffffffffffffff9, 0xffffffffffffff1a, 0x0]}}]}, @fragment={0x33, 0x0, 0x4, 0x0, 0x0, 0x12, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x2, [0x81, 0x1], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "c57e5504bc037c7a5ab78e55e17a44bac87e563bfaf592223c4297237204fe1fa3e52c9367efde5fe630ce63aa27ec33b65a6c76ad61ca79125529214e700c09e76d66befe6dcd338616634342181e3a5d3a88f02bffb9b715c1a1a166b90c9f775dc0e9d8db2a6e698f1e9d650cfe8b008f35cec7467433ab8079cb3a947d81a3c69595afeb1496537cf76a9ab5a8ab597116ce8b69c19eb67968abc8983f25ba7bfd1d71af351b5f99e63d72f8cfca9576052f2e29a36e973ab92be4"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x4, 0x1], "3264c611e3a3379e51776b44b4252fb2b007ff39bf4a96531b4f61182d8db9ed"}, {0x8, 0x88be, 0x3, {{0xd, 0x1, 0x20, 0x0, 0x1, 0x2, 0x2, 0x81}, 0x1, {0x7fff}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x7f, 0x0, 0x0, 0x1, 0x6, 0xc0}, 0x2, {0x26, 0x6, 0x1, 0x9, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, "02fe0aaabeff6be3255e69515268a288751c20d74b0cc89c87865ade13c01155168aeb807895f3ec61cfed8451684637e43189e8cdafd460f3839c009d9b6ee40f480211754641fe91f15692e7a1a1977a75b377b7c617fba4259734934925e836f85dfced9c86205bc3c74d6af286896c18cd70f83a5981412f875b557d48c994cf674f6e9085c59cf21b600d565fb2aaa9b0219201968272cf421dc68b1a0b3ce64338e2bb420110e6980c9348a6149964b700d560c030c6c6c98d806a3a4b8520b9c278134f2d2635273418cbb5b08b49370375ad7e481abe9027a1fbfaee4d8544ad3c4b5128634a70a2eb9b80b26afd899091"}}}}}}}, 0x0) 23:21:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 494.586591] audit: type=1400 audit(1754608898.566:23): avc: denied { watch_reads } for pid=5879 comm="syz-executor.5" path="/syzkaller-testdir941339826/syzkaller.PdWMTZ/72/file0" dev="sda" ino=16008 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 23:21:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x11, &(0x7f0000000000)="6a946df28c2063f48e585e9c2e2607071d"}) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) 23:21:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) dup2(r5, r0) dup2(r1, r2) 23:21:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 494.656833] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:21:38 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00!\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',\x00']) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@orangefs={0x14, 0x1, {"b37dd68197fa2149923d56792f53bb22", 0xed52}}, &(0x7f0000000240), 0x0) r3 = clone3(&(0x7f0000000780)={0x210000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x1d}, &(0x7f00000005c0)=""/135, 0x87, &(0x7f0000000680)=""/131, &(0x7f0000000740)=[r1, r1, r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff], 0xa, {r0}}, 0x58) sched_setaffinity(r3, 0x8, &(0x7f0000000800)=0x5) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0xa) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) readlinkat(r4, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/213, 0xd5) 23:21:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {r3, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {r3, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400300, 0x0) r2 = dup3(r0, r1, 0x80000) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x20040000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 23:21:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="0f01"]) [ 494.808842] 9pnet_fd: Insufficient options for proto=fd [ 494.813630] 9pnet_fd: Insufficient options for proto=fd [ 494.832115] 9pnet_fd: Insufficient options for proto=fd [ 494.861463] 9pnet_fd: Insufficient options for proto=fd [ 494.905494] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:21:49 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000006e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000009f5a86", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}, 0x2000) syz_open_dev$tty20(0xc, 0x4, 0x1) 23:21:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 23:21:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:21:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) 23:21:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREAD(r0, &(0x7f0000000180)={0xb1, 0x75, 0x2, {0xa6, "454e71dede9b48e655db79e88ecde2d3972e1b396a9159b355a8b69d97091c66c30aca2f6f6b252469316bc89356f4a7df54b657ee39ca41eb94652c0f48e4a6b2f6daa29279129b45c9362b9ea71c0d0de3dd386b115e7fe9af0390115c9c9aa5cfd8d74b87287d2d92f795bc803f7571b4b6092902770bdc131569a3ce2dae1b5aa4c7a15ff256a3aa9fef3719b832c850754d83fc92771a04cf9880a0d47464ba106841fc"}}, 0xb1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000) fcntl$setstatus(r4, 0x4, 0x6800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) syncfs(r7) sendfile(r3, r4, 0x0, 0x68e146a1) 23:21:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r2}, {0xffffffffffffffff, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:49 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x92) r1 = inotify_init1(0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/90, 0x5a) creat(&(0x7f0000000180)='./file0\x00', 0x2) r2 = inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20000000) inotify_rm_watch(r1, r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) sendfile(r0, r3, 0x0, 0x68e146a1) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x2, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '@\x0e'}], 0xa, "cd20c346ae627ab049beedee4271a105d9542b35fa24c0d66002e1fb01350c76f932c7a13cffcaca943e34728d1f01bde9beff08acd58f2d958b9bcfa3c9f9052e35de9e97d7e6ab129259400d9b53a9439133984652b5e1318738c145a8eea4305539aa3b4caf860aebbfaa74a4e7a751b7f9c4d84e203787ce0c8c50b927c2bc835b683d8580334cf0f92888634e4cf97f569995bf864ec814dba201ad45969b827b63"}, 0xb2) truncate(0x0, 0x0) 23:21:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0x7, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x7800, 0x8001, 0x696}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x2f, 0x9, 0x0, 0x1, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x1, 0x1, 0x2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="013b050553547663c13421b3", @ANYRES32=r4, @ANYBLOB="fffbffff000000002e2f66696c653000"]) pidfd_send_signal(r7, 0x1c, &(0x7f0000000140)={0x2d, 0x7, 0x4}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) fsetxattr$security_ima(r6, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "40ae1fc6aafc372e1bd0263c3dfd85d2649ffc84"}, 0x15, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013800)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r9 = getpid() r10 = pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) pread64(r10, &(0x7f0000000400)=""/191, 0xbf, 0x1) 23:21:49 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) ioctl$FS_IOC_FSSETXATTR(r0, 0x6611, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '\xea,$\\]\x00\x9e#'}, {0x20, '}'}, {0x20, ')'}, {0x20, ',$}'}, {0x20, '-*(@]@@[s$.\\\xce[)%'}], 0xa, "85c8e88c545d78d2ec5975237aa108eb06f4182b714b7813e51bacfa3bd82e316c247cfe531161bae6ae060b720236ba8797ccba480529cd8ef9c2082d21143da3deb5a91f44c47ff2dd52cd0b2765371bd7da32f7394dc89e9a8090e87cbb66cf76af262c2b6fce31cff7b9d8bb5d4378024ce3588e7e208623aac68af3a0f079d830acc6850fa58c4a9745dcdce39eb8f87bea28a4f50646e73db435def92436f25d"}, 0xdb) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) [ 506.004965] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 506.044858] 9pnet_fd: Insufficient options for proto=fd 23:21:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x92) r1 = inotify_init1(0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/90, 0x5a) creat(&(0x7f0000000180)='./file0\x00', 0x2) r2 = inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20000000) inotify_rm_watch(r1, r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) sendfile(r0, r3, 0x0, 0x68e146a1) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x2, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '@\x0e'}], 0xa, "cd20c346ae627ab049beedee4271a105d9542b35fa24c0d66002e1fb01350c76f932c7a13cffcaca943e34728d1f01bde9beff08acd58f2d958b9bcfa3c9f9052e35de9e97d7e6ab129259400d9b53a9439133984652b5e1318738c145a8eea4305539aa3b4caf860aebbfaa74a4e7a751b7f9c4d84e203787ce0c8c50b927c2bc835b683d8580334cf0f92888634e4cf97f569995bf864ec814dba201ad45969b827b63"}, 0xb2) truncate(0x0, 0x0) 23:21:50 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 23:21:50 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0x0, 0x0, 0x20, 0x0, 0x1, 0x408, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x220, 0x11d8794e, 0x4, 0x1, 0x1, 0x100000, 0x5a66, 0x0, 0x8001, 0x0, 0xace0}, 0xffffffffffffffff, 0xb, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60c7470000343a0000000000000000000000000000000000ff020000000000000000000000000001020090780000000060ca9d0100002b0020010000000000000000000000000001fe800000000000000000000000000000fcdc4613"], 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @random="7c0e11eb69ea", @val={@val={0x9100, 0x4, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1}, 0x7, 0x2, 0x0, 0x0, "9ca8691ca1d4b602"}}}}, 0x0) [ 506.227578] 9pnet_fd: Insufficient options for proto=fd [ 506.231827] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:21:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xd55, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',o=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) fcntl$notify(r4, 0x402, 0x8000002d) 23:21:50 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 23:21:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:21:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x81) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10) [ 506.345583] 9pnet_fd: Insufficient options for proto=fd 23:21:50 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:21:50 executing program 6: ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x2, 0x1, 0x36, &(0x7f0000000080)=""/54}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000480)=@reiserfs_4={0x10}, &(0x7f00000004c0), 0x2) [ 506.455252] 9pnet_fd: Insufficient options for proto=fd [ 506.506864] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 506.513732] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:22:00 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="83310000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf25010000000900030073797a310000000014000200626f6e643000"/46], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4f48}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffff81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x280}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4041) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000003}) 23:22:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) 23:22:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:22:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:22:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:22:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) socket$inet6(0xa, 0x80000, 0x81) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) 23:22:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}]) r0 = getuid() syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="2fb64012031012ea053403641ded633b655a51bf7ead3af9eb92450a33ba1266cad5887aab9d42a1f20b1365cec6465d55d1cba13bef9c7263d02935bc7fc96cc7af9d62227b7efc2b98b9c90028352798288e8b5a82299a8501c9e97341802436745f031d03664f80d269a33f8fb3bc053f895fa98b91dd6750c7dcde24b18ee5e79abc1b0aefdeb21e8df91e92688c2b3a3bfda673e829786074a7c888b77bcfa99708180874e070daf1bc2f02d92470dbe9fdbf7ed8786341d35864e53e20dd26c10532052f364001b686263322a6d4a86c3da4a69c3b89a0aec81bf0cfcf25faae183ffe5b9e95a2986fa6596b8863", 0xf1, 0x8001}, {&(0x7f0000000180)="178247a334093cb81cc2802d57d8421caa4f41bc", 0x14, 0x8}], 0x20, &(0x7f0000000200)={[{@nodots}, {@nodots}], [{@euid_gt={'euid>', 0xee00}}, {@obj_type={'obj_type', 0x3d, '{(\\+\xb6@M]'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x63, 0x32, 0x66, 0x64, 0x34, 0x62, 0x32], 0x2d, [0x33, 0x37, 0x38, 0x62], 0x2d, [0x36, 0x37, 0x39, 0x31], 0x2d, [0x36, 0x36, 0x62, 0x35], 0x2d, [0x66, 0x63, 0x33, 0x62, 0x64, 0x61, 0x4, 0x30]}}}, {@seclabel}, {@appraise_type}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x3f, 0x1, &(0x7f0000000380)=[{&(0x7f0000000480)="1024cb5cb11e21495e1aea1d9ed4ef6aa16f636703a9aafa74a662d1098ec6d6c60881a76e0e13233b22f5783d3e5174ca8c2ca8eeeb2cb0aa76cc7a6c9ff7d65c5489806ec9d9fae794e8b978454585e440ea3ce1025308bd93f881f61989c72650bb795460590ff45702bbbbb7fed48d1bd8725b9c15d7d8bd267085868dd6276957dd40cdbe34228cba5d8343b7990088f1277bd15246819ad6b722d3429868b92b30749d11670468648d3f4dd8d7c1076013d486e9a5dd19ed420455a6802198891d5a7ebebe8f0d249042bec69c0fd83b038f93c1e79ce2129ace3de3d5b77f8681507c0f8298", 0xe9, 0x9}], 0x1000, &(0x7f0000000580)={[{@dots}, {@dots}, {@fat=@usefree}, {@dots}, {@dots}, {@fat=@check_strict}], [{@subj_user={'subj_user', 0x3d, 'fsuuid'}}, {@dont_measure}, {@context={'context', 0x3d, 'root'}}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, '],'}}, {@subj_role={'subj_role', 0x3d, 'obj_type'}}]}) 23:22:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = eventfd(0x2) sendfile(r0, r1, &(0x7f0000000140)=0xe4f, 0x9) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000340)={0x0, 0x5, 0x0, [0x5, 0x9, 0x9, 0x0, 0x8], [0x9, 0xa7c8, 0x5, 0x6, 0x1ff, 0x5aa, 0x5, 0x2, 0x9, 0x6, 0xfffffffffffffff7, 0x1, 0xf7, 0x85, 0x20, 0xffffffff80000000, 0x9, 0x52792b21, 0x327af5ba, 0x5, 0x3, 0xffffffffffffff6f, 0x3, 0x804d, 0xe618, 0x1, 0x400, 0x9c0, 0xfffffffffffffffc, 0x7, 0x5, 0x3, 0x8, 0x80, 0x3, 0x7f, 0x7, 0x80000000, 0x2, 0x1, 0x7, 0x40, 0x100000000, 0x20, 0x9, 0x1000, 0x3, 0x4, 0x6, 0x2, 0x8, 0x4, 0x5, 0x8, 0x1000, 0x1000, 0x2, 0x0, 0x100000000, 0x101, 0x0, 0x5, 0x973, 0x73c, 0x0, 0x9, 0x5, 0x2, 0x2, 0x1, 0x3, 0x800, 0x1, 0x1c, 0x7, 0x4, 0x203, 0x81, 0x3, 0x9, 0x3f, 0x3, 0x4, 0x2, 0xe7, 0x1ff, 0x9, 0x1, 0x7, 0x8e, 0x10000, 0x6, 0x9, 0x81, 0x9869, 0x7fff, 0x289, 0x0, 0x1, 0x1, 0x7, 0x8, 0x200, 0x5, 0x7, 0x1, 0x10001, 0x1, 0x4, 0x64, 0x1, 0x2, 0x100000000, 0x8, 0x77, 0x4, 0xf1, 0x8, 0x200, 0x5, 0x4144801c]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$int_out(r2, 0x2, &(0x7f0000000780)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x73c382cd}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000007c0)={0x2004}) r8 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) openat2(r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x8200, 0x8, 0x1a}, 0x18) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10880, &(0x7f00000002c0)={'trans=unix,', {[{@noextend}], [{@smackfshat={'smackfshat', 0x3d, 'smaps_rollup\x00'}}, {@euid_lt={'euid<', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x63, 0x30, 0x33, 0x17, 0x35, 0x32], 0x2d, [0x35, 0x39, 0x32, 0x33], 0x2d, [0x65, 0x34, 0xf2, 0x61], 0x2d, [0x30, 0x37, 0x36, 0x38], 0x2d, [0x36, 0x61, 0x33, 0x35, 0x30, 0x35, 0x51, 0x63]}}}, {@appraise}]}}) sendfile(r8, r0, 0x0, 0x33a) 23:22:00 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 517.011873] 9pnet_fd: Insufficient options for proto=fd [ 517.047023] 9pnet_fd: Insufficient options for proto=fd 23:22:01 executing program 4: setresuid(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) setuid(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) [ 517.089407] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 517.096744] EXT4-fs warning (device sda): verify_group_input:166: Cannot read last block (1942717132) 23:22:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x1c, r1, 0x16566fdb4c104121, 0x0, 0x0, {0xd}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004010}, 0x4c000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}], 0x2, 0x0) 23:22:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x30}, {r0, 0x40}], 0x3, 0x40) 23:22:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 517.147390] 9pnet_fd: Insufficient options for proto=fd [ 517.167750] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 517.236746] 9pnet_fd: p9_fd_create_unix (6026): problem connecting socket: ./file0: -111 [ 517.325057] 9pnet_fd: Insufficient options for proto=fd [ 517.382201] 9pnet_fd: Insufficient options for proto=fd [ 517.858763] EXT4-fs warning (device sda): verify_group_input:166: Cannot read last block (1942717132) [ 517.865234] 9pnet_fd: Insufficient options for proto=fd [ 517.915945] 9pnet_fd: p9_fd_create_unix (6041): problem connecting socket: ./file0: -111 23:22:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7ff, @empty, 0x80}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 23:22:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x44840, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@afid={'afid', 0x3d, 0x5}}, {@access_user}, {@privport}], [{@fowner_gt={'fowner>', r2}}, {@audit}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r3}}, {@obj_user={'obj_user', 0x3d, 'trans=fd,'}}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x480000}}]}}) 23:22:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 23:22:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 1) 23:22:12 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:22:12 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="83310000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf25010000000900030073797a310000000014000200626f6e643000"/46], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4f48}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffff81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x280}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4041) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000003}) 23:22:12 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) 23:22:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x24a9, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="8309d7d71969c7a1cc689f06ae14d83b1eed9bacc047119f3d493dd8e521948bc21ca6e4fef7876841a381161b70122179cc4af70ed3577bac774606996510e1415f16dab8491b207ff49f167e90bfe87b01acc282d953cb7d367a45af005d52d913a83593adc881abbcc80872ca2ef8da206faa5769bdbd7d5fb88ca8d2ace8bb833d59d0a2eaa5e29001c8dcf55ff40cec1c01"]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x84200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42120, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xe, r1, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1260, &(0x7f00000029c0)) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x541c, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000000580)=0x6) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 529.053315] 9pnet_fd: Insufficient options for proto=fd 23:22:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 2) [ 529.075332] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 529.081821] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:22:13 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) 23:22:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/3, 0x3}], 0x3, 0x9, 0x7fff) r5 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/diskstats\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x448a, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport}, {@privport}, {@posixacl}, {@access_any}], [{@subj_type={'subj_type', 0x3d, '\n[4\x83z0V:\xff\x00J{w\x03\x10'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733de6642c7266646e6f3d4f3ac69c864155525e0aaedff6c3d00a44f76cf08122a221", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=loose,\x00']) 23:22:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 529.356104] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 529.362848] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:22:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = syz_open_procfs$userns(r2, &(0x7f0000000e00)) write$binfmt_elf64(r4, &(0x7f0000001540)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0x0, 0x0, 0x5, 0x2, 0x3, 0x3ff, 0x2b, 0x40, 0x38e, 0x6, 0x400, 0x38, 0x2, 0x401, 0x81b, 0x8}, [{0x1, 0x10001, 0x2, 0x7ff, 0x100000001, 0x3, 0x7, 0x7}], "1fbd225ab20983dc8f17a51b12cd8e5bd55cbac30609cceb2db3e3447af9cc55c8c72db75cc17106d90b8ce7f731e6f58cdacedfe32efbb96797d81ef35f5e09046ad979354d8dc40bd85205538f21157d4a24e0802e3abe5f1b7ed8a24fbc1fd38431032e934e5549e188f28b1c7ed0d87de8578ca2da5f2babbdeec136897a4806f6f1f28db4a5f78960c7046fef42fa4a2c881cbec26de241a830cab2bab1c8df091e4069a29326086f836cc0222ed888df73a0c4e0d778dbc8d052da723c904c66fdda61da7c9c3671eea693479936cc7f577da5ce8b610606b2573cb967a678b96d6dbfe87dcd6095850b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb65) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = getuid() r6 = fork() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000080)=""/143, 0x8f}, {&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/107, 0x6b}], 0x7, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}], 0x50}, 0x40) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000640)={0x750, 0x33, 0x0, 0x70bd28, 0x25dfdbfd, "", [@nested={0x58, 0x45, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}, @generic="5fb6e43d6110ffc265d02d89b4c0ebe41d47c1b4e719b8a069495197159fb7790a73d05dbbe6e96b4c71fda1414a4903601bd1438a638a0fa2f34b4542ebe9b9009a2a90", @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}]}, @nested={0x1e4, 0x3, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r3}, @generic="91addda3d2e42759a7db657cd81ac7b6eaa00f73da988fbe02f74aef2f2ee8a9c6b62eb7d51d3cb6ee49b43fa489db220308befa6d8036292f953be0191b741e0609c1c06eaefabceacc7ff41c3879bf9666550d8c382d1441850195d3d1cba3e1a58885b87fa02b4a6fbc144f5bea22769ca692fc2f90db12dc6c109c94d8b60e2a12a2a64f319e77b878e9431cd6951afd891a79cf13d418f600839944c2a481e86410155946a860bd272ad42115c454fcc886dfe5dee136827437da", @generic="c1a9a4df6a4ac6e0853154b13b7e4b0a27084b107f18fb92c6c8da79d9907e9bc99da004dae6fc", @typed={0x8, 0x1d, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x8f, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x8, 0x0, 0x0, @pid=r6}, @generic="102d59110ae354608422b629b1220b21a13890005ad71d57b6421c50ffa1843f4cd6684d83939ee8fa5173888f1c79011de716fabe7a4d2e39a86b9659f5d6c0ef7b69dac80a44220e2d05461eee433f76c31f5d15de491ebd5c394ea58aca9dd7c86d53a065f86fff57bc25f0877552344bd1692d7f6b01a096fb493fc3521b3ad35a60f9f79798e5c2c16b8907ec4e6383a600bd4c2c2df22b94243151a4110ac18813a535b6e62f87b37706a2b8a3646ea986c1115c5076fefe9dc4882f256535a3679065ec28b50a4ff230254dd4ca06dea923283f902cee8926"]}, @nested={0xd8, 0x17, 0x0, 0x1, [@generic="a7b465090478c8252a3185a56df24ac63dd6792a48a39fb015b7d9618f7866f18d3fd59d73679e8b9ad8fcf16f35e82e4784a25ba1085b254eda1a0069226ea4a52e811fde6ccfe58bd449bf11eab53cf0744dbdeffdbeaf95f49e915e7587e184d11232109d76d91b794ea2a2d4e111254f364e1c2be83c794e14eafb86d4aba6ed8e4a14a6bfdad02c4e0de62f992eecf8060aa3e9703a5592299b2d66bd8a627b3d5cfccbdbd039af6e852fc4ad2648c2005dd9b7f244282f8676cbcc583c9b503880ad8e33815d2fa6a16546c242632087a3"]}, @generic="2868618defeeb7768607a506bb80332d82093500fcce004f75ca6910784cef42ba388285398dabb150940d2698a71aa904d5f98d7abb571bec4054c0a089cecf11f0ef33d3d0f89187b4a893adc6b961c7597a8a0b2cba67b9af2df10268293bddd6d86c9fa18f25026db4e965d3c46c76985ae7cb08f4bf27d608e2c163d7ab430e569c996f30fbfd0a44dc1fdb1d070374a0449cba789f99ce0f21cbd0eb255ca20327f7973ad771416fbe63783dd4263142b1c8f1fca58e128a60", @nested={0x35b, 0x72, 0x0, 0x1, [@generic="7c157f0bc1d18735140c77ca670e2921bc70141ceb4745ab01b9b2a73df2b26c67b1449d507b12a23e0dcf948929928a40db031d8457a1d5fd949f10649d7f6754a8fcf56bdc2bdcc63c94690124ea37f639d923dfd915e12c2419a21ac3be398a576218cd931f4cac8ee66575b0ceb1dd03f5a618e721babfdfbabc28142e335ebea4e4b82e4a0f90e06d406631d26dbc1ab6d90ec9512d4ac7b48230945a1eeb8c0684f8f7e0114c641d67055a28c84f1213410707", @generic="802431dfbc72bd5ac82c4fd007ec945c50b101a063d645a92546ade38c3593f76992ec06362afa4e3c0c36aeac65a8e717ccd8eb553f1bdd321349cbe3b25358d58f53b0566e207ec56d7f5a4508fd7113d1d6ac1d7181043a047cca70667bd4a56bed524892fa33ee81b193c562befaa45c87884f1802a3b5ce70868cf460b62909556935d080188befa9dd5f27ce230b7acfaa928a786d5e4be666a531be06626afa268c8665755235a5ffb012c44fb253de4f410b813ae831", @typed={0xc, 0x47, 0x0, 0x0, @u64=0x40}, @generic="50616044017e6a774eba01f5343d2bc70737f842fb2f55e949f4c4bfbd958ffc7fb053fcb57ffe95a993b5f617fd44e723cc85e6a2a19206d919e42039d9ae21ef568f79", @generic="138ea99b1cedef59d6bba54d40e4d5715b67cd5eced95baa46965a51e41df732f192b3fe6afe3916d6a086beef39788de5641e4ae7fcaf9ea81fc9f02f771fb94a2d4755cd5041bd1db44180696d6f1b4e6c7f0e7fe09ca58e6e7e4846b08a0dc1329402fda27d63b0881b9ca7837f2089ef74e4258cd4ffcac887e86bbb1e5b32760f2b16502606877c8d0f015b50b749078ded690cb7eddb45cb", @generic="0950ad42d6896f21ec445c147e025a91d102ae72327f8581951db3fa5ca1b8e3dd503c8cfaed7b34da7c6f42e50071a89ffed2cbf6b7f6601169078d43cc61431f1a8cdf82cde79f96aa7029a4c9f617783d381f01f5cec4aa1c9093b1b2eb5b536f44e4dd0e8b3820fa69e0ce104ba1c6d9ce714d4d7fd51b3968669c138da616a7de17818438dca3add8905d0fd314b15151dc1fba8262f619282304a326f594a0553576318cef03f5f0629fee210e339176a5f674a49d572d527a04f2820ad04660f891c5bb626dd13885d811344ce6", @generic="6ea138ab4fe20c98a0e87592d8be3b", @typed={0x8, 0x31, 0x0, 0x0, @uid=r7}, @typed={0xc, 0x65, 0x0, 0x0, @u64=0xd3a}, @typed={0x8, 0x26, 0x0, 0x0, @u32=0x7}]}, @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@mcast1}]}, 0x750}], 0x1}, 0x4000000) 23:22:13 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) 23:22:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 529.517945] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 529.519791] 9pnet: Could not find request transport: æd 23:22:13 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x604a40, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'osx.', ']\\\x00'}, &(0x7f0000000040)=""/124, 0x7c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x29, 0x8, 0x4, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7800, 0x8, 0x6e, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000002240)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x854}, 0xc, &(0x7f0000002200)={&(0x7f0000000b00)={0x16e8, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1d18}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1137e115}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&^^!+(/]$\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\\@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']+\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "91f5c671898d979ce49e858ebaa966fe008130e16903e50ef646289aa1e3e7771639d1f7cbf0cb"}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x750}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\,!)\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/\xd8)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf511}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "0a17452858f9a101f13812339d610103fa02fe4057fd639a8162b6b7d7b790750ac2190d02"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+]-f+^\xc2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',:&%\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9ea}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!\\]$\\\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x18, 0x5, "4e7382ef381f01c6fba706914f31fe20d8b3efab"}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "06927a82a4bd6fea6ac7723bf359df7385abfb20926f27bb62055b5ae302b5757d7b5e6be394c814acee78955bbb6f23a7212556b7e90d51c601011efdcbc85799e86a07f48e2272c1e94a39641e60e7daa4eb0cd86b62b0be1b7c51f8c9ef24bf84459ad59802acf12ff5b4f693fd8dfa136e4cef992d37"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x124c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "9b88ae9494820b301ee631f8f285fe5c59c2fd412f92bbe368911ea915b02f4b98bb5ee2c8364815cdab8c16349658aa4749f6a4dfdac704ee398f65b20a6c3d8ed6af7b9c5248a780d739eb89d9cfd16f97f0339c9a7d40da072242092172b6bf7d4b2c6ab20407098cd3d3cfba8631e9cf13f509c4ed423819eb18a2c64058f47dde27a2cc27920236c6656f2d88abd42208c7b183c579716b66"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfe, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x871a}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff47}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '@$\xb4@]/\xe9>\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-*\xd9^:/]\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe9f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x16e8}, 0x1, 0x0, 0x0, 0x404c040}, 0x4054044) ioctl$FIBMAP(r0, 0x5323, 0x0) [ 529.528078] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 529.547492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6080 comm=syz-executor.4 [ 529.586386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6086 comm=syz-executor.4 [ 530.165252] 9pnet: Could not find request transport: æd 23:22:25 executing program 3: r0 = creat(&(0x7f00000003c0)='./cgroup/pids.max\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup/pids.max\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) pread64(r0, &(0x7f00000001c0)=""/237, 0xed, 0xa1) 23:22:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:22:25 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:22:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) 23:22:25 executing program 2: semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f00000000c0)=""/49) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f00000002c0)=[{0x0, 0x9}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x3f, 0x8, 0xff00, 0x1, 0x0, 0x7, 0x3f]) semop(r1, &(0x7f0000000000)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x10) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/35) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="480000000002000088ffffff70f201dfa940d56f8cd09376ca1d7600ea27853606675f0ab3ac7708fe0cb5390a666cf6b8d04f7aa00ab2592e6eb355a51cbeabdb610b1c23784b7ebc4f9664fb5462545d7afb7b"]) 23:22:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/112, 0x70) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) 23:22:25 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x32, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xbf}]}, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x1010, r0, 0x6d1fa000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@private2, r3}, 0x14) 23:22:25 executing program 4: setresuid(0x0, 0xee01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9, 0x2}}, './file0\x00'}) r5 = dup(r3) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x10002) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) open_tree(r6, &(0x7f00000000c0)='./file0\x00', 0x300) [ 541.488238] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 541.492644] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 541.496572] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 541.501633] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 541.523989] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 541.532105] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 541.543947] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:22:25 executing program 7: syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 541.566263] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:22:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000200002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000059000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000040)={[{@usrjquota}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)={0x0, 0xfb, 0xd0, 0x4, 0x2, "de78e3bc3ff7a3768129104a1810ca96", "49ed7f571fc9d522e4760c7a34d15e287922abccebb14ea057397f4425fabe6023fd3749b130f7341c151abedd2ffd7f0f46f88c81eb82321c29b43d78a74b3f91f911390cd0c6bbcc358e58a2a5bbcd5f6dd2f2f5dae49b0306fbeffe6c659e3843e7ce9bb6278d7143b97b2950a4f1e02b3d537b6632a1911a6629324ab714bcd59d44d2010bd2eab9486aaec2a30cb2ecb38abc98bf9ca775db40e2ee6852b1e49b95d499bf06dd8b20431a1c31aab224c35aa20c6ba67e8987"}, 0xd0, 0x3) 23:22:25 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) waitid(0x0, r0, 0x0, 0x1000000, &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = getpid() pidfd_open(r2, 0x0) r3 = getpid() pidfd_open(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',\x00']) kcmp(r2, r3, 0x4, r1, r4) process_madvise(r4, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0xff}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x9, 0x7, 0x0, 0x7f}, {0x941a, 0xca, 0x44, 0x7}, {0x5069, 0x20, 0x7, 0x5}]}) open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x81000) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) 23:22:25 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() gettid() r1 = getpid() pidfd_open(r1, 0x0) r2 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) mount$bind(0x0, 0x0, 0x0, 0x0, 0x8) 23:22:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74002298", @ANYRES16=r1, @ANYBLOB="020029bd7000fbdbdf25700000000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a00060008021100000000000a0006000802110000010000"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000014) unshare(0x10780) unshare(0x10000000) unshare(0x52000c00) unshare(0x40040300) unshare(0x40000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) unshare(0x8010b00) unshare(0x30000000) [ 541.686205] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 541.691612] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:22:25 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:22:25 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:22:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0) 23:22:25 executing program 4: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffa000/0x1000)=nil) madvise(&(0x7f0000870000/0x2000)=nil, 0x2000, 0x17) [ 541.844517] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 541.848967] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:22:39 executing program 6: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 23:22:39 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x11bc, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x1168, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "bd9f8470ccf1791a079ae1d10f43a86f7aeb1db092db4f5b3a2d95d49099f4107f75301fe9306ed5ab8f545152af7f77d7bacd89e3062a7b3cc8171a03a9983e54c195bca0330f5231c6fdbe93491768b4145c3c0dedd9be281609e8f1d6ea3eb1b7fd172d0f4f0f4abb38211e1d"}, @ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "ba7b1a9d25bcc3f2ee7b541de3eabdceaa080231fa989848156808b74fe2ce463fa8e67a715d723a76cfaa6b3075a5eb374d71b6de988d7946564da89b11ad6a3a1991149cbc2b90118f0df6179d4aaa9ec8f38a0c1212624df36392796960e4af022523275889bdd6d843ff83d29ef576cd7ae5c845c3512d30f6a2a084255dcd8258ad6efbaa7e79a4eb3a156b3aa8354e47a18b63e708103cf13c538cbdc633aa8fee4be8ff9eb65ba94fa483640f2ed145c0028f0db55c4d13baf542791d534c1c790bfcc5fe33d3bfc914a353dbd8c39ed700de29ef81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x11bc}}, 0x2404c008) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, 0x0, r5, 0x0, 0x401, 0x0) 23:22:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x80, 0x521100) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0x44) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}, {@privport}, {@access_uid={'access', 0x3d, 0xee00}}, {@noextend}, {@access_user}], [{@audit}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@appraise_type}, {@uid_gt={'uid>', 0xee01}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 23:22:39 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r0, 0x1, 0x6, @multicast}, 0x10) 23:22:39 executing program 3: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x0, 0x0) 23:22:39 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:22:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2000000) 23:22:39 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 555.474134] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 555.480967] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 555.499744] mmap: syz-executor.3 (6163) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 555.518296] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 555.526065] mac80211_hwsim hwsim5 wlan1: left promiscuous mode 23:22:39 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r0, 0x1, 0x6, @multicast}, 0x10) 23:22:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = getpid() ptrace$getenv(0x4201, r3, 0xc7, &(0x7f00000000c0)) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="82", 0x1, 0x407}]) [ 555.590804] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 555.595839] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 555.648971] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 555.654005] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:22:39 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f00000000c0), 0x4) 23:22:39 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x3, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:22:39 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9, 0x6, 0x7, 0x8, 0x0, 0x99f0, 0x400, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x1800a, 0x40, 0x8, 0x5, 0x37e, 0x7, 0x9, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x10002, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e73c0720200ba9fd71915e8e9410f4000000066642c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="008590c40479e1855c6248c830a28958c342114c24c97c837576f2d4ac53452496bda9a706784ebd7f62881e29a57ae257462595b9db9bc4ac8d06bbb4d607132434a8155ab9a70a82435032f2f9f2fa1fcf8574efcbd3eb375eaff9e0a408ff4c9f873e43f94e86a9"]) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r8 = getpid() r9 = pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0xf5, 0x4, 0x80, 0x0, 0x4, 0x82000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x40, 0x9, 0x29, 0x7, 0x101, 0x1ff, 0x6481, 0x0, 0x1f, 0x0, 0x1}, r4, 0xf, r7, 0xc) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setstatus(r10, 0x4, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0103000000000000000032910000150017017ebba9af7db38b140ae6c89a67fd605e2441ffff02833c0ed196f9cd63222007b61e2f24c596b3922d76fa63283657b287120fb3d11377632a362438c09f540271a55e6296f112df8ac5efc0a867c28cc3ef0f7a33f4e37cdb1556436d65c52f444fe007884a0f5929705f6c12", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x40000) 23:22:39 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:22:39 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8000}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a00ba"], 0x34}], 0x1}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x7, 0x6, 0x5, 0x0, 0x0, {0xd, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0xd0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/220, 0xdc}], 0x1000000000000364) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x1) 23:22:39 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r0, 0x1, 0x6, @multicast}, 0x10) 23:22:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget(0x3, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x6000) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f00009b2000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ba9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) madvise(&(0x7f00004a0000/0x1000)=nil, 0x1000, 0x9) shmdt(r5) [ 555.861855] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 555.867063] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 555.905367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 23:22:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:22:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x7, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:22:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000f300000000000006000000080003002f2a61f63fe7a741e777c28b30b50e9300eb8cccf436cf6fb810c1ecb7f26b9d2509d3aaf42af9f6ba7b32a5a8ce99eb596d5fd72636c8281cbc02aa24f75274b5909d5cbf5671c7994e5900cbd6f81c1d709678e89a288d75f6e16fd7a558f9df06c0d84addd92dfe1fcae4672b5d1daf6090e499", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x94, r4, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008011}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108021100000008fdf19fda5731ce40e6b4c9f419e802110000e2ffffff00000000000000640001000006028202020202010882848b960c1218240860448a455e140bdb7e8306c4d67bb3b6ec5d8852895d7c5fbb95effae82cf415fe21bf254a608f798ecae03f7a68be81be3a6bc787b41b7921f15477f96a81f09c6100975fb633d672ea6ed32bfd12ee5c77fd4a54d13e084a6b41d78bcd447f074fb366660a46913f9c46af728880b1a746a7bdac00000000"], 0x36) 23:22:51 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0x1, 0x80000400006}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x2b) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='c', 0x1}], 0x1, 0x498a, 0x9f32) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='\x00'], &(0x7f0000000200)=[&(0x7f0000000180)='[:^\x00', &(0x7f00000001c0)='-(!{)\x92$*\x00']) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1000, 0x0) 23:22:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:22:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffff8, 0x0) ioctl$VT_ACTIVATE(r1, 0x5608, 0x0) 23:22:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xf000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) r1 = socket$nl_audit(0x10, 0x3, 0x9) fchown(r1, 0xee00, 0xee01) 23:22:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 567.542204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.565485] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 567.574582] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:22:51 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x80100) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80, 0x10) 23:22:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:22:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x48, 0x0, 0x0, 0x3, 0x3, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x402000, 0x40) fsmount(r1, 0x0, 0xa) write$rfkill(r0, &(0x7f00000000c0)={0x1000000, 0x0, 0x0, 0xff}, 0x46) 23:22:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 567.696025] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 567.712294] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 567.854209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:23:02 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:23:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) syz_open_dev$usbmon(0x0, 0x600000000000000, 0x100) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() clone3(&(0x7f00000002c0)={0x1728e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:23:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000080)="6b1a1726336c3c70", 0x8}, {&(0x7f00000000c0)="eb032f6ee833bbf54b49a5acdef0e6783ac1dc81b2d5b3b54dd65180bb31cbaafbff9c3a638c3d9539a86b6c35a0b25c8f0cef67fdc70860eaad3559c09d0cdc439fa8f988d538fafd1f8eb776c1c8c843cdbd9ca2d770842201a145835436be453d32d607c38c8c272de143b7af9186efe5dbef5a100a47d687169bb7c28fdcd760f21afbdef7b22d4933e7b267365905c3b170b5a07be3ff2e65f4d3707b48f51eb36daf422ec16b5e685a1b0b7f5f1f71fb3a8c4550b1cb6fab65cde030456fb418ff2e3d536e03e3fe1198a27f427bc12216544e79afe71d69221cee8a09decbf29d920dcb26f76d2fc2df673f93c0513aebfc570431e41d0006fb082dd3449e38d8e61f91bb90fb0f6fafb0849d7df4fabdb763b2ee616948567a541346751c083ca4da9e8e92c3b232de348f50beb7a01800fab6a86feec431a69f679e8b9d47b1fafdacebdc95733b67b79fa2324318b3c416acf013a5483eeb16462af041b0f086cbc5b822beaa820c4ae15d40634650cce7e6178fc2e073af99326a84e8e002388f09197f32be4d831561d33c5cbac370e12643852c654ac324099d577d266daec4f849c03d053123cfde91889cbbf6012da5fadf2d0a17c7779719aa08ce96afe5ded08ced61c57e3c72d2f1e2322486917af117cb0e9b07f7517fa7526e09b7ebb35683795b2d42e7ca67518f4a179806ef40177fa4232573a49b2503ee38fdc1fcd97786a1d3330ad159bd1cbf82a7d3bbc27080308813511f0ca6f7dbf9c93f7473c5e0bb739bf9c7ab039558484bca4af6437dc9a383f9df2817ecfd62916e0d926948fa5b51b72efcf54f89501d1514d21e49d2e31154a48aa562b101e7800bf73ab952272ed28e80eccdc362c53a81128f743e65b4d7f4dd5ddd9da9dc0a7c20c0fa2e151362f5c177734fdeca41eff4c7b48c7fea90f1a472e4554399a9dc236214e3db0b8ced4c6a141ac8441e481a4a61838885598d24ceba73c3ba8eb9cd28c071c1c659fe87ff86f828a6ba2cb558a38818880e184a33e3fd2d037e43a83a4bb3c0033e50564259c324a933ceb285e96d2f9dbe30bf8505fcf959c6c75b9f80d9bf2ea5d3c40c203e7b7d4d73c84922eb6fb4644f410ed61bedbffa41bea66e92c92a93949bcec90e304843ef5c912e02d7612502a577f633eb5517f142637340a90bc38da07951d7fab995a0f1b06a4ff6637f8a729b2d277070aed0a5ce2eb8819496f2227f9f1f6965996e6d608210cd7b4118039cf409673d64c814d642a61c9a4428b294fdf59da393b2eb0e852cd4b57b00805fbe254adb772dcc893af0f336893223e88b981a59459aefc9ab53cff151b7dd8e1a04a1940ad76bd9f4e490d267b7ce87140a40aaa1a6498f0834205af8c38270e08931b7b0d3ace816f00c2deae155a6eda76d0e29c1c9d4a09576e50cdba7d468c671e9a27c8ff08a1a90ff7b4fb85c40fbfe27ffc1a688a997a136c6be7eccdbb7ed605c1e00b5aae86aac2636402340faa17f3aec5989b40a9ac07b123bed3dd2c61bfb9972d5ec5c45bf2c8d5434c20dcbf1455709c10896661db05eb2a4688ad4bcb66f1778513e820035d9488e5bb0cf432c714125feb6ccd3b4a3981a5b99e9a8d90c334d1cf6abc643ed1c99f53d5531875a0c91a0e529167a6c409f9260860cb1261c3409e07d8ce378f6d0e80f425ff0494c165c1e0248db14d885998d7f9a653dd4a81bd281a180d1a3ab517dcadb151d67df175a9968c74515ac24bee74a26c16643bd1e488250ba3af6bfbe5372a7a49a617495db9c1f8f5439fc304017ea4d24deb87ba103d35946bcee300b9032bcc6f17313a0ea8d9f1e73cf04b58de0ccea67fa6b5dfa354dbe04c4035da88c1277a33ec37178c5716924216dfe1fc3e226a53d750dd811d25495b1617bf9eaad1f5c421cf904efeb125a31bc6792b9a1f6899ac7c40bf0746bd2e2e308222f7fb83964c1f2e64f76e71eaa4970c985ea17afb8c7e05f674f7162288ce12c97369e6250f358d1c9e96513cce0926c22c9be7fd249f0eda41ae692778c191caca3d68783ff43fd17561323f8587ff12f96187aceddb2983afe9477a503f21808d39e56b8e94ec3b9846e98b4b9ba2ea429f4a98634f5dd907ad912a1c2627bfd12d0ec6f92d3c383d11af91b0a9aca9f742ed45168cc65cf4277e0d1178a85b1da16d032876df3bab1e861c18fc516679d96bbd604e608a15c27327e10ae5633295cf39c1ac656bdb8bd9e8df6bb0e7b38fa8d944bf15c5a1a1857cb8f7c27e18db6c63ab35b1ab4b9a6bc5c224a1d76799eaa77d31b7553a748535530e36653602a9f213cfe8aca6f40468ad04465412f356222ce6d191d909a28194cc8aab5df74cbb952885c71a33dae34efa7ddc60a0b8bbe95b2845e1e1e282097d2d8c32b8bc6153966a04b56bf4e1c4b48d08bc31b28c5060078d65fe56fd3c79cab6270bc16319bb1663cd318ef118eabcb253c20ba4c64af91b1d61d63d50aea4289b0bb948eb04b6f49d0196b7228ce13a11946dacced1fb73c79a202085e698b14ec8a8af253b0a87aa7c7116d51b1f0c3858332a2b429edc55e5c3ade8c6bda33cf7dae166f6cad4db6084cf0655ad5189a6d1a11e49c1611f8ae7d5ce16862b216996f236fe710ebaf5314880ca66675056c6e42dcb72e74fa7695ed67b37cda3d6a12bd17bda815711a18570abdc4333ec7240a7f3633d888730549e778d077b8d373269347328a87b5bb96176b8c8cdc84b141c72a992ec538ee10afe8918be5664ea7b899a270707850e4882a8c79b9b5268dda445715b629a132246e784f43fd7fe9b8ec50efbd7e8fb843912196792074de12fa19b6ad35417bf3ba4302c49e71ada535787a17e9ea4468760d0b472f8ede7f9def8a306290f88c447ab678a0cad910ea360d4f9c9b5b874f98212d675968a5eceaa60e1f6c145f69bac361dc3c1bf077e27133f611f399ba0f03287803e30b4dfc2827c9a90e52e158e7e986ddade5a81fe72bf1ca87f7ac08d7e1eaebd7f0d4b752638f252b129257418cd59ef6b0cf71df5c5c3725b27e1b1a70f84016a4205f043ca498280661f1ee9031633ed0d5f4ec962601fb04f6f309724567be17efa24ca2de804a123f4d1a42a3bf659ce1df52d58294115bcd5f0b2990dd21c22ded49b8c4cd80c8ee7deca359d7628c640fc655fcb3717689afa784a61f4e57d10ae089e698db81ed47010b45dac7666e6cbcf35c693023d0814e0d4f5c0660299496983f0a8117403938970d45c74520e845497e7edc405dd03ed2a166d0da88c196f2bf6f62f733b109de4398f4190c28bdbefe30fbc02b8ff6e41b", 0x948}], 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 23:23:02 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:23:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x9, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:23:02 executing program 6: r0 = memfd_secret(0x80000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2f6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000000) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0x40004, 0x0) chroot(&(0x7f0000000180)='./file0/file1\x00') creat(&(0x7f0000000240)='./file0\x00', 0x34) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f00000001c0), 0x0) 23:23:02 executing program 2: syz_emit_ethernet(0x15, &(0x7f0000000000)={@remote, @dev, @val={@void}, {@llc_tr={0x11, {@llc={0xff, 0xff, 'g'}}}}}, 0x0) syz_emit_ethernet(0x6a6, &(0x7f0000000740)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@mpls_mc={0x8848, {[{0xb4, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0xc963}, {0x430}, {0x6}, {0x9}, {0x2}], @ipv6=@icmpv6={0x9, 0x6, "30b31b", 0x64c, 0x3a, 0xff, @mcast2, @empty, {[@hopopts={0x11, 0x8, '\x00', [@jumbo, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}, @enc_lim, @jumbo={0xc2, 0x4, 0x3}]}, @hopopts={0x32, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0xb686}, @calipso={0x7, 0x18, {0x2, 0x4, 0xd0, 0x388, [0xb5, 0x20]}}]}, @srh={0x21, 0x8, 0x4, 0x4, 0x5, 0x0, 0x0, [@private2, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @empty]}, @dstopts={0x87, 0x15, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x8}}, @ra={0x5, 0x2, 0x5}, @generic={0x40, 0x97, "3a9f1360afecbb5bdc216291ecd0802b0cdb1be3776579831e5ff7ea2ca11a5223da03caf2f0fa8e691b011d25dc573fac784bcac2bab9974be477dfe1ef97b61b57e46aef19968a15e3f5eae27c3beebb00ead9f4d6535d5b38bc385b1b398ad0b405ffa745dd4dc73d900a8bee090be86de4cefe693c9bbc23fa9f703719755a7a1e40fe8287bf0d63eb393a896539df27731b90375e"}, @enc_lim={0x4, 0x1, 0xff}]}, @dstopts={0x29, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x4, [0x10000, 0x8, 0xff]}}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}]}, @routing={0xd4, 0x8, 0x0, 0x2, 0x0, [@remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x0, 0x12, 0x4, 0x9, 0x64, 0x0, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @empty]}, @hopopts={0x88, 0x19, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0xff, 0x3f, [0x7, 0x943, 0x7fff, 0x40000000000000, 0x5, 0x80000000, 0x6, 0x2, 0x6]}}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0xe3f7}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x50, {0x3, 0x12, 0x1f, 0x0, [0x8000, 0x4, 0x9, 0x80000000, 0x3, 0x9, 0x8f, 0xffffffffffffffae, 0x7]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x3, 0x48, 0x1f, [@local]}], @mlv2_report={0x8f, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x2, 0x3, @rand_addr=' \x01\x00', [@local, @private2, @rand_addr=' \x01\x00'], [0x8, 0x0]}, {0x56, 0x6, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x2d}], [0x7, 0x3, 0x3, 0x7, 0x80, 0x9]}, {0x0, 0x3, 0x5, @private0, [@loopback, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private1={0xfc, 0x1, '\x00', 0x1}], [0x1, 0x6, 0xc3082832]}, {0x2, 0x1, 0xa, @local, [@private1, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @local, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1], [0x4]}, {0x4, 0x7, 0x6, @remote, [@private2, @mcast1, @empty, @local, @rand_addr=' \x01\x00', @empty], [0xffffffff, 0xb6, 0x1ff, 0x4, 0x5, 0x5, 0x2]}, {0xcb, 0x8, 0x1, @loopback, [@mcast1], [0x25, 0x2, 0x1, 0xff, 0x1, 0x4, 0x6828, 0x4]}]}}}}}}}, &(0x7f0000000700)={0x1, 0x2, [0x55e, 0x959, 0x32e, 0xc71]}) 23:23:02 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) [ 578.913842] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 578.920824] 9pnet_fd: Insufficient options for proto=fd [ 578.987816] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:23:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:23:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:23:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25, 0xfffffffffffffffd}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011000)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x1) 23:23:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:23:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'sit0\x00', r1, 0x2f, 0x5, 0x1, 0x6, 0x31, @private2, @empty, 0x10, 0x7800, 0x0, 0x4}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="a73e9aaefb428e69dcd1220844fec4e878f3af26c35a1130f525b1dc354db8116b8d25c9ea67d076f9262e1695f2000bbb4bbc05d9f638f3accf2a20d266773ee654c29ce0b6df4a6741fe3330b3b287dc371367f840dd2437be1190996296043424296031a796c8800f7ca4f240af417e2530d776fb378c36260f7770d16c3eff702240fdbad1365931052c2a4b7ba16c420dbe11", 0x95, 0x75ea9101}], 0x0, &(0x7f00000001c0)={[{@quota}, {@bh}]}) [ 579.249557] 9pnet_fd: Insufficient options for proto=fd [ 579.311322] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode 23:23:03 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ppoll(&(0x7f0000000040)=[{r0, 0x1041}, {r1, 0x421}, {0xffffffffffffffff, 0x2000}], 0x3, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0xffff]}, 0x8) add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x32e7, &(0x7f0000003580)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003600), &(0x7f0000003640)) [ 579.349061] mac80211_hwsim hwsim7 wlan1: left promiscuous mode 23:23:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:23:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 579.394987] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 579.412591] mac80211_hwsim hwsim7 wlan1: left promiscuous mode 23:23:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 579.551048] 9pnet_fd: Insufficient options for proto=fd 23:23:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000001780), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18, &(0x7f0000003600)=[{0x0}], 0x1) 23:23:13 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020200000004", 0x6, 0x8000000000000800}, {&(0x7f0000011500)="ed41000000080000d4fcfffffffffffffff4655f000000000000040040000000000008f7", 0x24, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1001080, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@privport}, {@loose}, {@fscache}, {@cache_mmap}], [{@dont_measure}, {@measure}, {@smackfsfloor}, {@dont_measure}, {@appraise}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@euid_lt={'euid<', r1}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}]}}) 23:23:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:23:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r8, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r9, r9]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getgroups(0x6, &(0x7f0000000480)=[r9, r9, r10, 0xee01, r11, r12]) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000000080)={0x5c, 0x40, 0x8, 0x70bd29, 0x25dfdbfc, "", [@generic="629a53e49ba22df41b8899eb81d5b12ee39e93c0be60e98cf54f9d058d642cba94b3e7465fd3997d75a520ab1f5ca6947f49fabe88ef769fc318b16125b932f4c1f83edbfa166522973e"]}, 0x5c}, {&(0x7f00000002c0)={0x3140, 0x32, 0x100, 0x70bd25, 0x25dfdbfc, "", [@nested={0x2104, 0xb, 0x0, 0x1, [@generic="f8baf92f958471a1815d55ef41126435bc459963f5d1dcf89ad80ce19992d8c5713d4424d433aa9197c925fa0d005e06f6a0c2bda5475e41e27769c1f990f3421851d3fdd8e7c6297c6f4bc7eef078b443f852c25e0b7b29384b4545c32986eea5c72a607a3a490583e64d6c892c08b9f7c9b70bbd34f7eff446f47d657cd08ecfd68183dd6ad75d0b40cbd9d840fdb354c86911f5877ffb44d60bc92cba67513e80b9397c253fbe7e466ecb5de208af446ee87eb4a842f6c803024ad325ce20b0f7461bbbeb52caf6eea6ad94086990ee173c92ba486c19b1a18de8971f34afc751849d217665caae301f91a76eb79c5368942adb038b6a31115a1f177cbf1a31d716b3ed7c126471d8df77085132393c6fc016b4c56f61079a3ca1e8fa73aab2684ee0e13d5279b01676ddc23b97146f0891d73c20065563f394f2c4437ac6e3f4ca4ac43b17fe5c29697f0d0d276e985ce13bb0d2c5214360beacd001062ad2910b7c18a2bc78dd14037178020590a57e2d8b16a3d06ec4c99b0ce5d50ac1aa9b47ecc531f33d44c691b813bdf6a6c7da9cf072c935a0230096a5d760c8b38182bdd2ac769788d0231607170f0de35cae9efbacb089a13f11c152d1a91051f4dcb77dd50e4b2f8ee0fbc3d90fe0b0c1bb5a628804493af5bf37606579b5d0cb840ff31305aa066c963c30168c3bbd49b3d2594e505a035d6fee7f7a3364063a59f6f95796973f5178712eb995f2653bddf6735982fc5b5f3061cfeda8154beb9d947a48a88767a0e29453060b91b2a921f2e48d25745da2da8e1ea53ddd0c00529a3e23ae8ad19dcaa7fa0594f67e3d10e4ea01c3f869bc81217df4eb1c2028928c76c02174477f9850ffbf3436c2706cf4014df49b5651e9f69d0451c877cee9a201bfc1356837eac3a90d43db01616d59ec332373d6b4ad888a4907000ff79ad775d838f2b1106ec885954f150cacd4441cdd279fcfd41669d9319efeb3ab860e1936f5b50d888c7e4a7fda62081aace875b2ccfd3f76825d6140a99db087423f38cd5f61547ac09810a0622c0a983596047b9301efdc775f69ea7ddd7a3e02ec4e7f8d0fd949cc3a4c6282e3a97522d7aaa2998d5f4354c3445387b6a25c81f8b25fab4cf24a05def5d85638036228304fc3b4c238082ecb2c733bba59032ebf145bf2ef238ec16c358d5dd93074947c7641ae18bce3f7eabf77c4ae275554c3d267132769429cf82acf2724588fe9a8403c2f837be1bb3a38fa32dfe92bbf4cd63ea06d4b6cc7c6b8d89b65387f5fc0de22c517985bccdc87ec8709bef52cb71d284a21cfff1d2d95987075996cd9d688489d5a3612ce1a98869c7ae79db7505cbf99a07ce4d888e1dc372ea331d81225bd07647ad62499631f8a9b0da46198ada6a5094106083b711e3750658a2433b10102008555116670706916ae8c5608427a121bd213f27f7679f8613928dcfe99fe082f4eeb0b1e0cf573d3d7862da0acb8edc91b403e179c543438775eb7e481b6a9e641b18165436f8e260488711b44556dbb2fce455ee2b9aef9040cd6880d64b5f54c937d41e669f16414896a8ed30cd8ee69355425a454692aea044cc81d54646f869aa36be5d2e47210f62464f1e9c396235d760f40438ce4880b1ea4d9fbb3fd1026fbe66cf6b5a8658a1a9de38cad97b46303c6e11ce20547cfd917b8e020b4dd51219b2180b4909e2bf84f96aabce5d9cf62cdd9ccbd5eea5392b99e515af0f165da758c32a4aefc8cd3d9d1e6f26f9b649acda6a7fb8bfd7afd4eccd01a7bbeef8e9384781f4648ff62990beaf4b410f31e96fbbf8575c382d072e56a1ae1efe97cccb01577ac0cc036f5358fb416b8db69559ee6577bed836ea25278b52c409d9d9f5746f1e4bfba9defb1e018fe61024a9106a69c98bf3a1f7696d7565d98a72dae495f97293706f924079b738f3f18cdc9a3694c9bda376014306d9a3731bdf898792b0b0b876bfdfe28c8a157b98c7899443c0ae7d538267327a6acfb9f5129a3827cfee5e7b7ca32ffcbebd68cd2923173c9cfe51dfa0791de92a56a7aac4ec23da6cb0a5b9c93ac7ecc088af779494c6a48a50d1f88d3388bc52d37c795099bc80caba68aa9a069f73ebfa65db92c934d2898dc2e5b4db2fc97fd8bcb674122ba2eb1ba8029321b7617f2ea7bdc1c242bf5edb8b221d5eae1a9452bc7de0eb61d983a6d137bd32c317f0a96c5c7715da8e7441bdde4d25bb23cf32eecdc74cd752981641f4e1c1c49f882f73348d90fbe8f96576ee3ed4ff1b4e09d537268ba026fbd4a24154261f1a9f229708a27a42742c1d1511405922310cac27a4a37dabf163d242108d70ccd1d36b57770d595ecad6482693e4f7eb5d1afe3083bf1bc09d3620f7047546bc99561dccae4b00b5c317503f1bd3fd797b5c137690913799b652ee46f8888db9eb7800f9fced1f217a6d0b50ea764b000e33c8f259ae52e1e4fbab50444ecc5224f5c50953da44adf54f034b2a84d7a64aa3ccfcc58a0988902d0fd6749f9313fa92eb2eece2e233e9c34f8895a40ebfc96cbcf3b9d773da4e0868ce3ab706c949d8e1efa2aace883daf625c1a634717d8c6ffcfca03dfe904d9640a8b1bea442a5ac8f9386aa1b7470b47edf1d9ce8ed647440e6c1db5d88ded5de57d17df93ae668f1917109647a87e581ccf48828cb0b8be212ec57d8ba9feecd91880a3a21d826839de3a0d6c016922aa890aa2a85824a7653150f2ddbde91243c072e015fcdcf10e553cdf763a56b21498fbdeb4220f2f983f893f96bf35aad0aebe247720b44005037d2b7e2e800081bcf9db84838efb2cd98674a1e22b257210ca58c79a13af61b9e342a6a293790ee2bb8136bce4bfca2bee027c6de39d8eb7cda4d465081c8a25f8a136259e8eef86fdad8c3e414a95e3d916bca0aa68f941d07bfb70521c24984e9e28649eda614b7e4fc31c2d555b403c574f42f8180ce610f2bb03c32ccb529348a272829c59cf564ba3b403077f7d4a86449252a35a8113913ffdf4ff01c03e50653769688002dbb5ea27f1130cf9f2826fcb5f4f9fca021baa7d6a251aa8449ffc0febaccb263e4bd771406135f12b015ff427bb279c4acf42307797dbf2c25cebc723500082a5620b5406b23824e0ecf6621ef8f378bf1ae9435496284ab9dba3c2cc4acc10f7d06583dcdbe4b881292ce1f0c2210f3dc6ad67eed6722a22e54f882a51c96718b5a5e298543310d5a3dfdcd39a7d8429681a9ccaa15e152c93d583be12b962b5471030788ebd1b6d92579913d5876804a788f44f4b378302fa9129abfb537f9cd07a2f494465d2eb3083141fff2ea007c064c8e136a93584ea5c8e56333291cdc74d6ec0cff2555c2bd8df825910e9526a3646af21f4625f8e7017d1db490e9fc35aacbaf8a8d94418ae7d9027934719950fc319e0c5a7c87ab01f3dab69f30119e4617d29ef1e882d94c573f627d7007266223a49a9a0a2d2586b4c15bd016ad99599848603f9a8aadac92508dd2852390071e31fd958cb289564ca2bc84bfb3bdba1f185b4edc8457592af95634cc4a9fde7fc06ba2eb5ed3a8604ab5b2bb1e62ec21f5417d32d009328aa6e123c572ea282d396b96fe04bee268ef8236952ed8a19bc62e0d744b3430b3e9eb167973c77d4708d823a46dbc0d79995828133992b07ef6c14cdf7b4eccc4f2e1c1dd8647a9ddeab0e492591e3268d1ee1da214e7d4978ab528747f148302bd4fb0036a22c457b5ae5faf69241776e61e00e86dea887813515cd890c2f1a80db2d197a9b43acb8ef80f7776c7d4d57f1631186dca13d187521020f07bda8374a917af5cc1db79e488c72572aa02761cdc58e12b4367939b9b6f436f774ab0e9696c092aad79a888656324a1dd23431b50ba8de4c610184e019cbdb2af3e4b459e5ca5795b935c70c3df98db445614f6abb91889c1b4e592207d52005d152413c4795eb0416a669eb46ea2018c7b688aae0c79e6282a9451bcb9a5ce6bdfd1f8260d2844c20eeafe4bd9aa2e8860f55faafb947fcb054a06536035363cdc1a9caa4c047d10119ee519637a3373d071e189524d37e4702f201cbd3fcf56ec6b10a930b323bdb47fac6b07f1b1d850642d537b04756d294c42876438d5e2b554ce5c9e4b61fd2f7c2c8c818c81a25db15d44ac9f9f4ba8cf11eb27c380a808d3c76917ad1eba58263b1aab5ec5b8613eb69dc5f42432aee8790add89e300a228082a717f8590ad5ab2e2c0672a71f468657a53693ed478283216f9a5af88b625bc4fc153dee0f7ae24a97d2469b4a31901e5cf6d44c07265fb62ab6272289b9576741cc13febe558802c2bab788612d67fe3da27f809d9b2c7de4ff84fad1fccf55d342f0aed465c91e6486c2f24b7818e7de6c1e5ffe226464d275d0288b25a4b947645345e4ac5b5a83ebf08df9d26cf4e666a676a3107e0624b338466fd7753044fc5376012aa9ab71ac2fdb2bfdbee473f5f8cc4597badbadf5326e28c395044cceeccf2b43125652cd2f4e25c4fadf66fd8dd127b263d796bfdda4d6750921f2133e74928937ff67e80e1b311dac1e40b2b95f351e3db648f2b7248bb1e8e67a12f16e9896396d8b947aefa7688460913df690e08c1ab0fba50291c19021b3611fc1d799f0620428d706c835d363cee672f1ef1b27f0034c96da0443718c219942c2f203a57eec2881e0c749fb871ce564705a77e81f3ef6f9b22c237fb40ecec05d471b261172b03f0d673f13a1dafea18f61a06955d2ea4fa1c6e70fd20ea235f1c785b53ea26e503a2599ca90605adff07e844dde633fb3f1d1e04b0eb49ad16abd1d0d0bb4e054cc000cf88255f7e35ed62f56366535ce82ddc84b702fb6f84229baf57c687650edb87d7ebe34bd94cb9d13dbb85869a620fd0fdf8faf9fbede8efb0613fa1f49f70abbf48d9e56c5918587849af3d354dd6ce1e2183f2982fe94a72fe4ee2564003c2ade972096c179d4036cbeafb118f29644f45e5e45474dd998b354d2d9c3cf387cd7746c8d6b148c648b1f247050e187456259f549c86ea7717ed9aac928f260182eeb5870db95edd08b361cc4c6b1eaf9ca8e2e34ddcd8b2013163b3569a0c172a9d7593552bd94c99e57811d0b2798d99ad89df03c9f8eec82a3eda520dafbf8772e3f05768208fde56b69589582c3eee131e23c7ecebed40c40911df73c62ff48493c670a520858398ae0b4654fadfcdc5e5598f882234be864aaebf8c0de55e1235e8bd548304c1f5a4eee468968ee123805a900dab0496f364c445a342acf7cc46606362571af691c48bd578066e22134d28aba4ba2b021200caff320095a90c68c35125f343c61fb82e367c238ffbfd2d3ef7380952725b3116ce067286b4fc3c55bd318758bfc9aeb92a778a5bd7609667fbbdfb715ac8a770c8e7c12a4f180aab8031793b5af35229d705d7e11f105557b724a2e8409f8c1b13fb669538e3b1f6c3b7eae074ad411e0480b6251946d3878f73a47953ba2706813c35d7c3d59cf10f21bbaa6dc95f0847f251e6d7498b771c87885ae6cc193eb396cdcbf660e1746acc936a6f34b379ac0236fe2b35707fcb4417d3e79bc3b1fc1dc8eb1aea75d07186a328c91bb5eea9dcfa7ee37efc5848dacddf58ab1c8af187c13238e8282d5a98f6efe17d275f0363c1475ce215f4770f3328eab2dfc9d89579d5f64773cb5e9907af8e68665cb32d0f844dac08d84873c0a39a8da71d3c1103fb7bdf48078bb009470df7e2cb79ddd76f7eaef63842", @generic="baff6aa3589b2249a3b14603c1131573ba0905dcbe9eb5e04cd20aa3da697cec39a9d5a86adac785ca9119c16e5564d8b42b9b9eaa3d5fb5", @generic="056ba0517616c1dbdd5af807849d600eaa39d73aed2b46022d149ab18cfd62293878f998d3980775f2976ef3d4d48dd199317b64910d489865aad1456a74d9442f51437e959bd3e80a13b91a619ba0c9c6aba491b1b85fad936375aa6199a4ca789a6a746c5308f607fb589b81f0c66f54c0686aac350e41a5e31dc5b045560bef1a468537b4ea8f06d3ca92b6cbefa886999894b7c099bd261ed375469adca1035481cdc536d81626e9c0126d978294c62ccb7882993f7b8b85d39fe51efc3ad91536b4a03a71bb", @generic="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"]}, @nested={0x20, 0x5, 0x0, 0x1, [@typed={0x19, 0x4a, 0x0, 0x0, @binary="e60d5d07fd1122b3fc846bd1732657e7161f4b162d"}]}, @generic="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", @nested={0xc, 0x36, 0x0, 0x1, [@typed={0x6, 0x1e, 0x0, 0x0, @str='%\x00'}]}]}, 0x3140}, {&(0x7f0000003400)={0x194, 0x24, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x35, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="0a2a4b2b3244034a3c8fd1b36308d3167739086325c42d4b04b92b2062568a9581f474a00c0fbcb4db405c338505ab922c2544cdbfcae8ee09580b61f3dce34b3a08555bcf5f4fee4acc4f7ac2e8c86badcd88717e691f7f51c90b3ce501e5957b465fd9f3149f6e0253615970450da5aa0f8617f90c5b0b3bd76bb45f09", @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@loopback}, @generic="320e9728dfd468055d1da1f8d2855a7fd533ba89cc81dac75af54e12a1db7b1e69940375e033e086bea928efc12e2022accb6996dde698e7857d77fdd7d2bbcbf66c19d8dae1d1fcb05864eec743e636947ed2c67bdb8158f0f2ddfca5fbb18313522bf51828c808526df2b1445fc128d1a942978ce6b2edeb18ad0c554cdcb6973e5a6a09e0660969326f001a37327be24e6dd976ab3e0b92c906daf6910b7a13098c74f8e48af91349b928746bbfa0d4", @typed={0x8, 0x76, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x28, 0x65, 0x0, 0x1, [@typed={0x4, 0x74}, @typed={0x8, 0x8a, 0x0, 0x0, @u32=0xe11}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x7f}, @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x1000}]}, @typed={0x8, 0x47, 0x0, 0x0, @u32}]}, 0x194}, {&(0x7f0000000100)={0x88, 0x14, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@private1}, @nested={0x61, 0x8a, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @u32=0x5}, @generic="2cd3525b727c13eeb1816df0bcf3c7848d", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}, @generic="97d6c99bcafbe11696a0272c487dd00b933e39bf9d727365fd181c09259af4a34ffe3255490ab9f48924673780b4f68449529d70ef5d0f5792a50bf5"]}]}, 0x88}, {&(0x7f00000035c0)={0x30c, 0x38, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@generic="62851b671851544d13ce15fb481e7b3dd23bbb0c041416e646ae1267eecd9245dc01316763a8ab6d7e5e573b1e410faaf6588ee64e29c9386042e02273738d1e11d705782deda21c4ad2540ee1191ac6c929b606430873150b1c3f804ce9695c7a098a3de260db0f124dc56f480cae5af8188cdbbb4a6b9a3a36036c3312c4de0c0c07f90bbdec73f7860d0732e130263cde73b08d1368bf301a6a9db349361ebcf04f5d55fb029f088b96b1ba09edef3ab7620ee117aa1472eea723ff", @nested={0x4, 0x2d}, @generic="4d63fcf6bcf1e39aa8cce2c63366fec46667e3706200a9c63b39c5eed1ff75ff42a4", @nested={0x181, 0x96, 0x0, 0x1, [@generic="f8d203be7d466094aaf23f8b97628440036f", @typed={0x50, 0x18, 0x0, 0x0, @binary="bebdc3546d2efa4119d32a14e2fd5900b110ffbfd3dcfd34630934a50acbd5ff030249a8bf81766e65dec395602038abb5717cf9d2dd456a5122e8d44ced785ba8a130e2fc75733aee39de15"}, @generic="a37c9d3e67a94a20e4316cdedbed9d5e73b13ddda282b3be5d2f671a83b7615ae42147822bc8ae8e825daf41ed6e1ac6ed6f82718ec17147d4b8a6c78dce7dd417ef7bd7a7c6fd0656762785a36a9d02f7600da990182ea44896574c5d47f28ce8e7f5eb39c5041c02ea8a7c18647dc0e010e56e72508a64c0a94ac11d192517082963da8a43f6486db4a08dcf5e0b7e3b6316799529cdb69db144f09dcbdf1e8b103c7d1bb8d4faa80b5b95bcfd78e4526e2aaac095b37cb0dd8dc36e8843430615f1", @generic="507066d020d85f978495bc5beda445d0ca9d7f1c19a2328fc573f6c014298415e69160ce83ec7db122997d395b58f9ad83a27736e81a0374a4c61c6eb438317f3e0250c55bc7e680287b56e8589f70cf0cf3cb52afca3616"]}, @generic="6c89d0dc88968fa9fba52ad4e803331f87a4f59c309ea78195fb5033e0b338ac2894047abaeac4c3070e1b673d74698462e4a85de16688744a12b2aab0515926356cd47810e2d08d4fc97a0451c6f402f232d1c20875e2108a1f965ef1074cc3e122de9dcd7fda652bbacc6f4e27e55429e798f14a0dbd2b248118146b2b9dcedca40be461b2233298c0cb081a122b72e2b4dccb73"]}, 0x30c}, {&(0x7f00000001c0)={0x60, 0x32, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x2c, 0x0, 0x0, @u32=0x4}, @generic="879776b53d5a8919c0d8d0ec65e670bdb49191d2b1e65181d43cc80324bc67c132681a8a9daf794a53691732c2b5c89890283b2ac455d3d3d94198d61e84c93a1856882d9f"]}, 0x60}, {&(0x7f0000003900)={0x224, 0x21, 0x200, 0x70bd26, 0x25dfdbfd, "", [@generic="d3bdddfdb5d2bee3dbb3d12ead048d8f4e456362e871255bee2ffba8e82b32a777fd5444b0235e26994820cba1c0531fb7b6cf7fa4e683ce7379da855369b35674476833a98ee35fcaff8c1a27eeee6772936196c2830f7479d42ee70a48537bb8fe81798a4db3f010fd6438e7d0dfb6fd7567d134ca4185bf7ed25ecfce223f8da561a5adedf7501743a0df9aa2ff", @generic="9ff3e2207774fa14bd455d9c748cfe320f33916313a8b33259135d1368e42c8121e3e9a10700bb7d717c04fd841956c79244ab05397d0c68bb07cabbb939370b224c4c2d4c8428ce0a269d70585eb27951148fad0f169c562433e963c863f5d53379774a94e12a12da260d7b3e155a978e958204baefca155a2c25191ea8eb9ba35d263128a73c7a23a03ba0d0e03e187c796ec7df4303849c8479c5b3c83721f9f96f850b625ab8d0c5c03ef1f1c7394bcbcfd7c737071fa16f8ace249d1b374f774e11cc", @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x3}, @nested={0x93, 0x4d, 0x0, 0x1, [@generic, @generic="9f7ae412f09609a9d954980eff876893bb48d18260f43c6c9ca11af3d11c721d3c1f356c6c88778cec0d892bea210bf78ca212c8f0615042fd26b030cad0fe9a7e25d325150df0288760349a382c445e7c1660c8c1dbde9a40695de24f6833d2b9a293a80d1599e01af109cde2c4875d11e7ab445eeffd782b9acf192b969b2724c454f7df3df3c234b5c9dc45f12d"]}, @typed={0x1a, 0x22, 0x0, 0x0, @binary="ff50c7ea1f448c798fa57f8e31516ba0633bed4f6d53"}, @typed={0x8, 0x73, 0x0, 0x0, @uid}]}, 0x224}, {&(0x7f0000003b40)={0x10, 0x39, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x8, &(0x7f0000004380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r12}}}], 0x120, 0x48115}, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f}, 0x0, 0x0, 0x0) 23:23:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:23:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x10, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:23:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x80, 0x6b, 0x76, 0x1800000, 0x3}, 0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x1d, 0x0, "5c79f3b2d138b7260f5a3d050609c0dd4410f16e35c396a4a789b775008c2895012061de7328553f2386996cd1f69d1592f7813f71b1f2089e08fe1b60ea859504c931f85dfdf7e2692beed5f79a2d1c"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:23:13 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000008600)) [ 589.683025] 9pnet_fd: Insufficient options for proto=fd 23:23:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:13 executing program 3: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000380)="aa96c401560624805dde47ac4077f5ee", 0x10) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0xff, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="29550ccdbb1170583cbc8a22a69442750c306b3e80fe4ee1532e94b01ea9b29bd5146a9a6a0e3f4f8bf77901b7d1455658429dbe2a6df479900f9b0c09b32b347c46394aadccab3aad060587f0b969736689308130c5ba447929c9b52c2fdadd4e4077b5221996097722b8cc2154913275f7dc0845fba307f962ff5d6a", 0x7d, 0xf3}], 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB="73697a653d3333673533396b2c687567653d6e657665722c736d61636b6673666c6f6f723d2bf591612b7d2c7569643d", @ANYRESDEC, @ANYBLOB=',mask=MAY_WRITE,nbj_type=ramfs\x00,smackfstransmute=ramfs\x00,uid<', @ANYRESDEC=0xee00, @ANYBLOB=',rootcontext=unconfined_u,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) 23:23:13 executing program 2: prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x0, 0x80000001}, 0x0) r0 = fork() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000540)=""/23, 0x17}], 0x3, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/221, 0xdd}], 0x1, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r9 = getpid() r10 = pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) io_submit(0x0, 0x4, &(0x7f0000000400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000000)="042e1edf31d3a8260229364f80ef5975f0a8b9373af31afda43d1cba6307eac160403308dcc16851c8d6ce08497c64bf5154e0a0ffb29ccc616a75b00513eccc6583e64de6e04532d21af0aada9ad101f3e53a1e1048c8a6bebf08498cdc6e305a6a969100e597663f2af0e624f1b43dc80bbd3b5e493d2563d83077861cbefeef27", 0x82, 0x8, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, r4, &(0x7f0000000140)="9efd42235081fd9040ff62cc6c3011ea8dbb3e155a1fb2c1e48ae091201d8c6f894b017e27442c7d920e9fb4b9b9f8f456a8b9ec19d8ee43e61a9162f3a5028fd803d2f7958a3f4d3f52cacdd5c32405bf7a056f523ba762852b1d19f2c25e70b92ce70ca9062f782838a293b5c8a44b7d244fa6e09c49c819e5396f9b628559676833b9ba6e26ad3498f7e80f3d9691887d34db", 0x94, 0x1, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x0, r5, &(0x7f0000000240)='7', 0x1, 0x7ff, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x1, r8, &(0x7f00000002c0)="75f516ad711e5c5e81a86ab90ede6e6bf9fd7fa1a58f6342a76aadea88d7d8c3619959b210730451bdda0eb88218769e03387e192693d3106c74145adf42c14177a306300b905fddbda418fc8d2d6d916b9f4a1564a824b210b17d9597402a7ce8a84073936bd5702eb7ca38eab990a63e477b23097e4462686a18f7492380549738ea886d06cde18782f6a469ca1ca323dc9a9ec68da10838fda59e3af53d4b5a99a5ef8c57049cc9787cbe46184e17fe701bcfb47c8ea6fa7d44a048711413be213f9aac8dfeb77a206dd752b3ef2640422ec15d639731234c5aa41335d5a944adcafefa6eda9f02", 0xe9, 0xffffffffffffff87, 0x0, 0x2}]) 23:23:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x300, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:23:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 589.788171] 9pnet_fd: Insufficient options for proto=fd 23:23:13 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:23:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:23:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:23:13 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) creat(&(0x7f0000001880)='./file0\x00', 0x80) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x50d2, 0x9, &(0x7f00000016c0)=[{&(0x7f00000000c0)="f72af965be2dfad390054bddfc2b38cdee", 0x11}, {&(0x7f00000001c0)="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", 0xfa, 0x1}, {&(0x7f0000000100)="ccc2d500a2c07b42fae897b675bdf5db0450a99f419995dd99e048f565d1b1767e85ba6c87593c997f3b4772", 0x2c, 0x2}, {&(0x7f0000000380)="50d3f387d2c6d1bd9e33f5612fd644523a64e9c214f445c5dff957506b7fe36f0480516c13154ae358ec87ab24494b6d34a96830217694d9bd935f7763a0f459c46aacce2eda108b1458a4ccb2875c884d1c4aa7077ee49751d027b5d812b1375f078a638ba98889771ed0834cd3c3d27d36c93de9734caac8f86c50ea12da2301f422", 0x83, 0x9}, {&(0x7f0000000440)="2bddbb89c19b011d4acf957f289f609eeafe86e591fda5c30d34b3b70d10ab1454441682ab5a78e767e8f55b8a235177332c94953f8bdae15c12d450b32d8d477dd5b909c91d8b32f3076792cc17441d2d716123e899f90a0b6a1206fb3e9ddbf51bd322b09120942fceed4e6452898cd73e67dd7f08679cfbceceec6e2423cbe107f6626756f07fe5ebb1cb2c90eb980686677ab4407d7331d87a406c3b8386f40872806e065ee7c21539f17045a6ca137a3866b41bf52bec8f29cb2a720b88753cd14be5bf992007f65ab22e96b4ca4dcd", 0xd2, 0x1}, {&(0x7f0000000540)="d9639bdcad29e7f72d6f7f610559f23d516df64b52f88c3aa2ac013b4be61b24cadae6279a0e9d5513e24479dab6f851308d9792e75f361524fdd18fccf14f276f20be6532f1036877daac2e07b33f925572f54be88501e34db6fa706a93ea4064e6ac7268e6cbda155f56a603c8e4c2afd08ef6017226c6b050130180aa923659b2fa844c588fcd531740d06ab660d7406842417db6b7153903b4dc076b6934424ea0e09e38de7239cdee671be065787f3b8cc8e91a40f8068afe2325", 0xbd, 0x912}, {&(0x7f0000000600)="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", 0x1000, 0x8}, {&(0x7f00000002c0)="82aa5f0cee92e5dad8c8c959a80f8b7e0bd32efe86ab84a74edd6292f081cd9dc040834bdad8cca4832445787cdc53c5dbfa4d4923174f0a8173fe8945f344c039", 0x41, 0x9}, {&(0x7f0000001600)="4a9a9bae3e9c1b3c3e0894c63d00ab7a8a5b254d58523932d973541f7ee6f431f3cbc4c020bb4a2974ff4972c8a69040d99e4df6101a2038d9f2076bb1ef28c682e53c2848e79222187851a7614cbdd07bc26fb8350b1b80c4e02feeb67b4dd4a5cd4ca3d85cc5386c87221502543fd3378f394d68c292fffbbfdb03018cea04b21be649872c40540adb5049cf", 0x8d, 0x7}], 0x1000002, &(0x7f00000017c0)={[{@sbsector={'sbsector', 0x3d, 0xffffffffffff0000}}, {@dmode={'dmode', 0x3d, 0x4}}, {@block={'block', 0x3d, 0xa00}}, {@utf8}], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '@.\'\'!-[-$'}}, {@measure}, {@fowner_lt}]}) lseek(r0, 0x79, 0x2) 23:23:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x700, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 589.893080] 9pnet_fd: Insufficient options for proto=fd [ 589.905478] 9pnet_fd: Insufficient options for proto=fd 23:23:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:23:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:23:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="12fdad85f18c", 0x0, 0x0, 0x0, 0x0, 0x0}) 23:23:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 23:23:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x810, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:23:22 executing program 6: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ppoll(&(0x7f0000000080)=[{r0, 0x1022}, {r3, 0x4}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$TUNSETOWNER(r0, 0x54e3, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000006b400)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "80587302eda485"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000006c400)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "660e6da5274775"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f000006d400)={{0x0, 0x6, 0x0, 0x81, 0x100000001, 0x401, 0x78ee31d0, 0x6, 0x400, 0x7, 0x4, 0x80, 0x1, 0x9, 0x40}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000006d4c0)={{0x0, 0x7, 0x101, 0x80000000, 0x6, 0x942, 0x3, 0x6, 0x8, 0x5, 0x4, 0x5, 0x0, 0x9, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000006e4c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006f4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f000006f6c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000706c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000716c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000718c0)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {0x0, r5}, {r6}, {}, {r7}, {0x0, r8}, {0x0, r9}, {}, {}, {r10, r11}, {}, {}, {0x0, r12}], 0x3f, "2063d7dc56841b"}) 23:23:22 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r1) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5f) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_cache\x00') close(r2) 23:23:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = dup2(r0, 0xffffffffffffffff) r3 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766058e2ea9", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0xf76eb6f9a425a57f) getpeername(r4, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x80, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r6 = syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000ce5c3e7897d10249812131a7d18fe34a415adb6280f67e477771eb89856a3395e23a3a5a25e99857824d8833febb530526cf2264d9f6407486a3c6d9b9172a", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) [ 598.481370] 9pnet_fd: Insufficient options for proto=fd 23:23:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 23:23:22 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 598.584210] 9pnet_fd: Insufficient options for proto=fd 23:23:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 598.624451] 9pnet_fd: Insufficient options for proto=fd 23:23:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:23:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x900, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 598.675864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:23:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) [ 598.761187] 9pnet_fd: Insufficient options for proto=fd [ 598.765004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.792167] 9pnet_fd: Insufficient options for proto=fd [ 601.247560] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.251584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.253552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.258165] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.261552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 603.285795] Bluetooth: hci3: command tx timeout [ 605.332839] Bluetooth: hci3: command tx timeout [ 607.383160] Bluetooth: hci3: command tx timeout [ 609.428805] Bluetooth: hci3: command tx timeout [ 621.768858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.770014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.837907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.839076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.968009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.978581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.288370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:23:57 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0xffff, 0x1}) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1f}, 0x0, 0x0, 0x0) 23:23:57 executing program 2: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:23:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa00, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:23:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:23:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:23:57 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:23:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 633.332399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.345191] 9pnet_fd: Insufficient options for proto=fd [ 633.362559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:23:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb00, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:23:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 633.409824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.443362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:23:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 633.459711] 9pnet_fd: Insufficient options for proto=fd 23:23:57 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) dup2(r2, r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') readv(r1, &(0x7f0000002480)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x40, 0xdc, 0x2, 0x8, 0x0, 0x3, 0x20000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x10b80, 0x3ff, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='\x00') 23:23:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:23:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 633.532605] 9pnet_fd: Insufficient options for proto=fd 23:23:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:23:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:07 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1008, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:07 executing program 2: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:24:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:24:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000400)={{r2}, "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"}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 23:24:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:07 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:24:07 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:24:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 643.320719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.345095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.369479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:24:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 643.394973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:24:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:24:07 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1020, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:18 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fstat(r0, &(0x7f0000000000)) 23:24:18 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:24:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:24:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:18 executing program 2: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:24:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 654.148814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.169421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:24:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 654.180474] 9pnet_fd: Insufficient options for proto=fd 23:24:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2010, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 654.194992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.214919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:24:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:24:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x4000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:18 executing program 6: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x24d) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(r1, 0x4, 0x44000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r3, 0x5412, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30f4759533886bbc855ea066df42b0bfe787d4420a3ea502aaf34a311f06b2835edcfb1fa1e9c4245f5c09cb933967682a7a0ff0c3311d1173a69b01410ac2891fa65166b5a95571bc21caa7406e6f370008000000000000200d04ea346f0000000013bc99c7dd48cb4122a31d0bcb47885fa41b400d31091ca888963b66888689d1d502771766215f003935f6df72b127c4e328e2506c45496998a9ef457dfcdde29f09bc601494"], 0xab) sendfile(r1, r2, 0x0, 0xfdef) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 23:24:18 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:18 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 654.353329] 9pnet_fd: Insufficient options for proto=fd 23:24:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:24:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:24:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:29 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:29 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x0, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl(r1, 0xfffffffd, &(0x7f00000001c0)="07ef783ad8c2a553e0c5ab3eda2a642d6969a47ba78047b78eda69e738701da0be4a8d417a1e6ac368f94426fd2525968aa4f9d793918bf3ab36ca9c6b57a6455a0a44b2ce5bee390c8c3c3fc113197fd81c76bf4f2ad1c5662f7b087a97b06de0246cca45b30f0622bef20cd79a5b66538d3045a0906acc88d6d1a8f6a20025e5f317131edeb34139e119d3779e1d11cd03f2b146bf82ecafd5be6ad8d40c8152715c82cdaa86f39b2dfa0afba83721f0454ed3b5bb0c67809165cc385b961842ef073fc3d8ba36245994dfa6c6351c81156b5a2155a8f692da2a6ee26ce0acb063c13d88d8484ff560b6093a80") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0xc0502100, &(0x7f0000000100)) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) 23:24:29 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) 23:24:29 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:24:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltnid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465766d61702c64656275673d3078303030303030303030303030303030302c616e616d653d7766646e6fbf059b18f750fc520eb90cf92ac2b0b14fbd604f11e2535272304c8af54759f163088ad0a2953c3f5be5b89f5d281b58cae186dd60fd3b22ce307b2d808d54a4117fe7fc08598f61cd257311a8d4ee983128a430b9e9137b7a9498a22f58a20fde40f970f30221c6bdf7e9303fa57ac9f0dffa1b4db49d181ab213e41799c2b07c105e81678d66be76a97fb356b32bdaa9b2945da1383189dec6a7fb022b0b330d1e74f04e2f619b0f93d730d462a7c1a4d6e668677c97c6fa18e0501d2c00"]) 23:24:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:24:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x80000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 665.606344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.612484] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 665.623891] 9pnet_fd: Insufficient options for proto=fd [ 665.625824] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:24:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:29 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x80038, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x6, 0x110, r0, 0x5d324000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfb) r2 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) clone3(&(0x7f0000005880)={0x68820800, 0x0, &(0x7f0000005700), 0x0, {0x2f}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0), 0x1) syz_io_uring_setup(0x404a85, &(0x7f0000001280)={0x0, 0xffffffff, 0x0, 0x3, 0x6c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000001240)) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 23:24:29 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:24:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 665.762869] 9pnet_fd: Insufficient options for proto=fd 23:24:29 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 665.873846] 9pnet_fd: Insufficient options for proto=fd [ 665.905057] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 665.934972] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:24:40 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e1f4655fe1f4655fe1f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000012700)="20000000d4c49a2ed4c49a2e00000000e1f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012800)="c041000000300000e1f4655fe1f4655fe1f4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000012900)="20000000000000000000000000000000e1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x5480}, {&(0x7f0000012a00)="ed4100003c000000e2f4655fe2f4655fe2f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000048c5e5fc00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x5600}, {&(0x7f0000012b00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001000800000000000000010000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6a4ff5400000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3538363334313633372f66696c65302f66696c6530000000000000000000000000000000000000000000005960499000000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xa0, 0x5a00}, {&(0x7f0000012d00)="ed8100000a000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd265a5700000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x5c00}, {&(0x7f0000012e00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e2f4655fe2f4655fe2f4655f00000000000002001800000000000000010000000d0000000e0000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e970470900000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xc0, 0x5de0}, {&(0x7f0000012f00)="ed81000064000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c979cb91e00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0xa000}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB="01"]) 23:24:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:40 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 23:24:40 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:24:40 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004600002c0000000000069078ac141400ac1414aa9404010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d6de19061deefaa589631b485f2b35af45d132021bf1f62325c4fc3970a8bbcb7350ac92e1cdfd0f00fcf06545a14dcc2e4dfa29c9cb1fa34fdb07af600c8027072122c9f563cc152c109316"], 0x0) 23:24:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 676.148232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:24:40 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000005dc0)='./file0\x00', r0, &(0x7f0000005e00)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0x1, 0x4, 0x3, 0xd38}, {0x4, 0x0, 0x7f, 0x6}, {0x6, 0x5, 0x40, 0x7fffffff}, {0x4, 0x1f, 0x7a, 0x1}, {0x9, 0x20, 0xa2, 0x6551}, {0x3, 0xd2, 0x4, 0x7e5abe59}, {0x9, 0xfb, 0x7f, 0x200}, {0x7fff, 0xf8, 0x15, 0x9}]}) faccessat2(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300) 23:24:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 676.198250] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 676.202625] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 676.205066] 9pnet_fd: Insufficient options for proto=fd 23:24:40 executing program 2: personality(0x4000005) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:24:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, 0x0, 0x0) 23:24:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 676.385622] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 676.390972] 9pnet_fd: Insufficient options for proto=fd [ 676.392578] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 676.516523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.572413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.575108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.882181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.932590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:24:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {0xffffffffffffffff, 0xa2}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:24:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x9, 0x1}, {0x60}, {0x30, 0x1}, {0x1}, {0x24}, {0x2}, {0x6c, 0x1}, {0x36}, {0x2, 0x1}, {0x1b, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x10, 0x70bd27, 0x6, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 23:24:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, 0x0, 0x0) 23:24:48 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 684.482127] 9pnet_fd: Insufficient options for proto=fd [ 684.484164] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:24:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 684.502030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.507199] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:24:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:48 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001500), 0xa100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000016, 0x40010, r2, 0x4360a000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2=0xe000000a}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x2, 0x0, @broadcast}}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7c3f779a) 23:24:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, 0x0, 0x0) [ 684.581179] 9pnet_fd: Insufficient options for proto=fd 23:24:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 684.630806] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 684.633759] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 684.665603] 9pnet_fd: Insufficient options for proto=fd 23:24:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:58 executing program 6: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000000080)="818e2b0596aefb00df2b8fd4ac598bae8283420182d611e6e7fed9f7cf952daa7164fbc947cc3ddaa59cc40d16d4b1f725a2e9cff28f1d9596d4a8101838ad6fdf22537f8e5e42a314a039cb4a5e0d4f3ef86329b464b1fa9f88e9cb9e8a89a6ffe172521972", 0x66, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@ethernet={0x0, @multicast}, 0x80, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000001040)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000200)=""/234, 0xea}, {&(0x7f0000000300)=""/166, 0xa6}], 0x3, &(0x7f0000000400)=""/227, 0xe3}, 0x6f1b}, {{&(0x7f0000000500)=@ieee802154, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/55, 0x37}], 0x4, &(0x7f0000000880)=""/79, 0x4f}}, {{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000980)=""/24, 0x18}, {&(0x7f00000009c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f0000000bc0)=""/124, 0x7c}, {&(0x7f0000000c40)=""/112, 0x70}, {&(0x7f0000000cc0)=""/106, 0x6a}, {&(0x7f0000000d40)=""/147, 0x93}, {&(0x7f0000000e00)=""/73, 0x49}], 0x9, &(0x7f0000000f40)=""/25, 0x19}, 0x1}], 0x3, 0x0, &(0x7f0000001080)={r1, r2+10000000}) 23:24:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:24:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) pread64(r0, &(0x7f0000000540)=""/238, 0xee, 0x3ff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYBLOB="04000000000000000100000000000000050000000000000009000000000000000100000000000000090000000000000009000000050000006a0b0000d14200001f00000000000000c000000000000000000800000000000004000000000000001800000000000000000000000000000000000000000000000000000000000000ebd8403d45c69df8c4dd91adfb10690932f42b3402fee7d6bb3653bd625ba3f5909b865631b15f42e69bbd3789519ade8bcbe2453222b5342d4e6e3faa00212507f8b16db6c6e53e706b2312d8d06182c3b047f5e5fded7896c398244d2843dd96cd205921ef034487cd3c59e91add52357d18f9fbcb2317babdd40ffcf4788d8bd8ba9029116d379bbd78cf295c2b68461c6c773a5da02ee39392bdb37efd485870cd1565867e15e46300"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file1', [{0x20, '['}, {0x20, '$-'}, {0x20, '(*\xde'}, {}, {0x20, '-'}], 0xa, "79c024fa7bcaaad5f610cecfe165c0d3453032c41a4277e05b0ce81db13e9b400a6f28a865cdf2389dae10cb075230901f89dac97b60762e1e9dd765fb2c0cdc398b8a445d8640ceb880cb0c722e654a2a1800fe788e0e07a7b07e1cad3cddc62ae14e2fa55200fb963cfc90cb3598739b95dc9de28cba2f50de53c4d4dea72d87ebc77182f8f9c7214869daa13ffa0257591f950d269bd2a5fc68a5ebbbf675822b38b6610cd33acb204cf685e2012b758ab973f5a8218236e16e7de8dc16c6d501c41eead9232b884ea4c87b3efc92c3ddf455766433ab4b6ed960439d24161e20c7e172455bdd31fe21c1662402ee0e4222cb9d"}, 0x10c) close(r3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f00000003c0)=0x4) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0) 23:24:58 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) 23:24:58 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:24:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:24:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 694.256898] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 694.270201] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 694.274624] 9pnet_fd: Insufficient options for proto=fd 23:24:58 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) 23:24:58 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:24:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 694.371555] 9pnet_fd: Insufficient options for proto=fd 23:24:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:24:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) pread64(r0, &(0x7f0000000540)=""/238, 0xee, 0x3ff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file1', [{0x20, '['}, {0x20, '$-'}, {0x20, '(*\xde'}, {}, {0x20, '-'}], 0xa, "79c024fa7bcaaad5f610cecfe165c0d3453032c41a4277e05b0ce81db13e9b400a6f28a865cdf2389dae10cb075230901f89dac97b60762e1e9dd765fb2c0cdc398b8a445d8640ceb880cb0c722e654a2a1800fe788e0e07a7b07e1cad3cddc62ae14e2fa55200fb963cfc90cb3598739b95dc9de28cba2f50de53c4d4dea72d87ebc77182f8f9c7214869daa13ffa0257591f950d269bd2a5fc68a5ebbbf675822b38b6610cd33acb204cf685e2012b758ab973f5a8218236e16e7de8dc16c6d501c41eead9232b884ea4c87b3efc92c3ddf455766433ab4b6ed960439d24161e20c7e172455bdd31fe21c1662402ee0e4222cb9d"}, 0x10c) close(r3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f00000003c0)=0x4) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0) [ 694.410127] 9pnet_fd: Insufficient options for proto=fd [ 694.413978] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 694.417477] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:08 executing program 6: getpgid(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3cc0c09d6885e70c04fc260046a0ac373e664ea1ff12b48d30102cfd98f6386ed69ceb4a6c13cf12f56f2e4ba790724952375a2be472e21f206520e5a851"]) 23:25:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:25:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:25:08 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) 23:25:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) 23:25:08 executing program 2: clone3(&(0x7f0000005880)={0xa2000000, 0x0, &(0x7f0000000000), 0x0, {}, 0x0, 0x0, &(0x7f0000000080)=""/54, 0x0}, 0x58) 23:25:08 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 704.669098] tmpfs: Unknown parameter '<ÀÀh…ç ü&' [ 704.669883] 9pnet_fd: Insufficient options for proto=fd 23:25:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:25:08 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "69aef37110cf2fa7b80005ef9a1049"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r1, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) [ 704.716476] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 704.725302] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:08 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 704.766486] 9pnet_fd: Insufficient options for proto=fd 23:25:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:25:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 1) 23:25:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 704.856752] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 704.861575] FAULT_INJECTION: forcing a failure. [ 704.861575] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 704.862613] CPU: 1 UID: 0 PID: 7178 Comm: syz-executor.7 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 704.862631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 704.862638] Call Trace: [ 704.862643] [ 704.862648] dump_stack_lvl+0xfa/0x120 [ 704.862692] should_fail_ex+0x4d7/0x5e0 [ 704.862721] _copy_from_user+0x30/0xd0 [ 704.862744] copy_from_sockptr_offset.constprop.0+0x167/0x1a0 [ 704.862768] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 704.862797] packet_setsockopt+0x7bc/0x3060 [ 704.862815] ? __pfx_packet_setsockopt+0x10/0x10 [ 704.862829] ? selinux_netlbl_socket_setsockopt+0xa1/0x460 [ 704.862852] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 704.862875] ? lock_acquire+0x15e/0x2f0 [ 704.862889] ? __fget_files+0x34/0x3b0 [ 704.862908] ? find_held_lock+0x2b/0x80 [ 704.862930] ? selinux_socket_setsockopt+0x6e/0x90 [ 704.862955] ? __pfx_packet_setsockopt+0x10/0x10 [ 704.862968] do_sock_setsockopt+0xf7/0x1e0 [ 704.862988] __sys_setsockopt+0x11f/0x1a0 [ 704.863012] __x64_sys_setsockopt+0xbe/0x160 [ 704.863031] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 704.863055] do_syscall_64+0xbf/0x360 [ 704.863071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.863087] RIP: 0033:0x7f6e03ef8b19 [ 704.863097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.863108] RSP: 002b:00007f6e0146e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 704.863120] RAX: ffffffffffffffda RBX: 00007f6e0400bf60 RCX: 00007f6e03ef8b19 [ 704.863128] RDX: 0000000000000002 RSI: 0000000000000107 RDI: 0000000000000004 [ 704.863135] RBP: 00007f6e0146e1d0 R08: 0000000000000010 R09: 0000000000000000 [ 704.863143] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 704.863150] R13: 00007ffe7274169f R14: 00007f6e0146e300 R15: 0000000000022000 [ 704.863169] [ 704.891526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.908852] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x44, "a09807e35e1614a9f60f4f431f85738a3e83af3c45db08ed08f6fc5cdad4991d3354e99799d5572b164f03c2ca13d59bbe2054eafef8d5ba9d2d6748f4060864fadd77e7"}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000480)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x9, 0x3, 0x59, @local, @private0, 0x80, 0x80, 0x2, 0x2}}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="600100001700000425bd7000fedbdf2500000000000000000000fffe00000000000004d23c0000000000000000000000a8c5000000000000ac1614aa000000000001000000000000fe80000000000052925fc8204bfefcb45a2afae80010000000000000154e2400", @ANYRES32=r3, @ANYRES32=0xee00, @ANYBLOB="fe80000000000000003f24da6901f4ba3e3c12edb63d914f56fefd0000001dfe8000000000000000000000000000aa4e2076004e22ffff0200a08087000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="ff070000000000000100000000000000ffff000000000000020000000000000009000000000000000000000100008000ff0700000000000003000000000000008331000000000000060000000000000005000000000000000800000000000000ffffff7f0000000001000200000000000900000001040000000000002dbd70002c001300ac1e000100000000000000000000000000000000000000000000ffffac141414000000000a0000000c000f000400000000000000"], 0x160}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ipv6_route\x00') r9 = getpid() r10 = pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616ea3e966642c7266646ed224", @ANYRESHEX=r8, @ANYBLOB="2c7766646e6f576a5171af7ecf03d16f24d6195a8fe656d5a09f3aee969d3a4dfe12b2355373113c2705ac5dd65ecbe61c6f020bb504fe75a4a7197d5e250c4e07849bb1e1edb3f6ef10016b260eee791b6a90957ff896e3b9", @ANYRESHEX=r10, @ANYBLOB=',\x00']) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000e06010100000000000000000900020073797a32000000000900020073797a30000000000900020073797a3000000000050001070000000000000000070000000900020073797a300000000000000000dceea6077c1b91ad442a0e42b432f6e699f1053bceb316bd9067fb"], 0x54}, 0x1, 0x0, 0x0, 0x400c004}, 0x8000) 23:25:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 705.000101] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 705.001893] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 705.141789] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 705.145316] mac80211_hwsim hwsim9 wlan1: left promiscuous mode 23:25:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 2) 23:25:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) lseek(r0, 0x0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f0000000080)) 23:25:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:25:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:25:19 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:25:19 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f00000002c0)=""/112, 0x70}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x2000) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r8 = getpid() r9 = pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000480)) r10 = openat$cgroup_ro(r3, &(0x7f0000000440)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) kcmp(r4, r5, 0x6, r9, r10) r11 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r11}}) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x50a) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@name={'name', 0x3d, '\x96)$,'}}]}) [ 715.055166] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 715.060763] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 715.061245] FAULT_INJECTION: forcing a failure. [ 715.061245] name failslab, interval 1, probability 0, space 0, times 0 [ 715.062324] CPU: 1 UID: 0 PID: 7207 Comm: syz-executor.7 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 715.062340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 715.062348] Call Trace: [ 715.062352] [ 715.062357] dump_stack_lvl+0xfa/0x120 [ 715.062384] should_fail_ex+0x4d7/0x5e0 [ 715.062407] should_failslab+0xc2/0x120 [ 715.062420] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 715.062439] ? __alloc_skb+0x2ab/0x370 [ 715.062464] __alloc_skb+0x2ab/0x370 [ 715.062482] ? __pfx___alloc_skb+0x10/0x10 [ 715.062501] ? __pfx_inet6_get_link_af_size+0x10/0x10 [ 715.062520] ? __pfx_inet6_get_link_af_size+0x10/0x10 [ 715.062535] ? if_nlmsg_size+0x41f/0xa80 [ 715.062557] rtmsg_ifinfo_build_skb+0x82/0x290 [ 715.062576] rtmsg_ifinfo+0x9f/0x1b0 [ 715.062592] __dev_notify_flags+0x242/0x2d0 [ 715.062612] ? __pfx___dev_notify_flags+0x10/0x10 [ 715.062632] ? trace_contention_end+0xca/0x110 [ 715.062648] ? __mutex_lock+0x16b/0x1110 [ 715.062668] ? lock_release+0xc8/0x290 [ 715.062691] __dev_set_promiscuity+0x36d/0x770 [ 715.062709] ? _copy_from_user+0x5b/0xd0 [ 715.062733] netif_set_promiscuity+0x53/0x150 [ 715.062753] dev_set_promiscuity+0xae/0x170 [ 715.062766] packet_dev_mc+0x73/0x290 [ 715.062788] packet_setsockopt+0x2638/0x3060 [ 715.062805] ? __pfx_packet_setsockopt+0x10/0x10 [ 715.062819] ? selinux_netlbl_socket_setsockopt+0xa1/0x460 [ 715.062842] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 715.062866] ? lock_acquire+0x15e/0x2f0 [ 715.062878] ? __fget_files+0x34/0x3b0 [ 715.062896] ? find_held_lock+0x2b/0x80 [ 715.062918] ? selinux_socket_setsockopt+0x6e/0x90 [ 715.062941] ? __pfx_packet_setsockopt+0x10/0x10 [ 715.062953] do_sock_setsockopt+0xf7/0x1e0 [ 715.062972] __sys_setsockopt+0x11f/0x1a0 [ 715.062996] __x64_sys_setsockopt+0xbe/0x160 [ 715.063015] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 715.063037] do_syscall_64+0xbf/0x360 [ 715.063051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.063064] RIP: 0033:0x7f6e03ef8b19 [ 715.063073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 715.063084] RSP: 002b:00007f6e0146e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 715.063096] RAX: ffffffffffffffda RBX: 00007f6e0400bf60 RCX: 00007f6e03ef8b19 [ 715.063104] RDX: 0000000000000002 RSI: 0000000000000107 RDI: 0000000000000004 [ 715.063111] RBP: 00007f6e0146e1d0 R08: 0000000000000010 R09: 0000000000000000 [ 715.063118] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 715.063125] R13: 00007ffe7274169f R14: 00007f6e0146e300 R15: 0000000000022000 [ 715.063144] 23:25:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:25:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 3) 23:25:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:25:19 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) [ 715.193058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:25:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 715.224172] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 715.228716] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 715.249135] cgroup: Invalid name 23:25:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 4) 23:25:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 715.301626] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 715.309390] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0400fb7600000000000066696c6530000c957ab2ddfa4212192946a12845ef511bdaccfcd8b8fadbcd269b5b6720b2b82d148325bbf5aeed8f39a2a88b22021ed7bf0bb8506372e8873a9e3f3bca567d68b7984115eadb2c459c7259d4c6791a57dd4a2162c023188e294bea6add4c0cc9a5ae4f08f19d37964487f76cd6b8085ae901dd43d6a52db4b9ab0f628c45b526d15622528d"]) splice(r0, &(0x7f0000000040)=0x3, 0xffffffffffffffff, &(0x7f00000000c0)=0x40, 0x4, 0x1) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x6, 0x0, r2) 23:25:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 724.436839] Bluetooth: hci3: command 0x0406 tx timeout 23:25:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 5) 23:25:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)) 23:25:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:25:31 executing program 2: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000001000/0x12000)=nil, 0x12000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8) 23:25:31 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:25:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:31 executing program 6: ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000140)={0x7ff, 0x101, 0x81, 0xbf800000}) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x1) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="01e3ffff0000000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) r2 = open(&(0x7f0000000300)='./file0\x00', 0x200000, 0x122) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), 0x69f013911ce4fe47, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@aname}, {@msize={'msize', 0x3d, 0xffffffffffffffff}}, {@version_9p2000}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@version_L}, {@version_u}, {@uname={'uname', 0x3d, '#['}}, {@aname={'aname', 0x3d, 'rfdno'}}], [{@smackfsroot={'smackfsroot', 0x3d, '#'}}, {@context={'context', 0x3d, 'system_u'}}, {@seclabel}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xffffffff, 0x6, 0x40000, 0x6, 0x8}) lchown(0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="2dfc959f251de78f2d97652c918898595269deb6c75310c84dd75317639977942df79a4715a4bfe704d2073ad045d2f514e7e1e26682c75256230deeead6b166317e8f3d938d220f980248cf81c145f26420ba2d5cfb444529139bee573ced8a66e63f80591c9a0a4a522bf0b07cbdb24326c5ba0d2523c55500f407fb31479a1dd273f0ad3957021ac406a42eb9ebc4cdfac776d4cdd39aacf3cdeb0eedcf105d3e689286daa537b3df4a7ca93794b71f22f8a8ba8aea807e669a071d3a", 0xbe, 0x20000088, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) [ 727.416815] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 727.423393] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)) [ 727.473291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:25:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 6) 23:25:31 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x0, 0x88804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r1, 0x0, 0x144) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendfile(r0, r2, &(0x7f0000000180)=0xffff, 0x1) r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000080)={0x1e, 0x37, 0x2, {0x1, 0x100000000, 0x8, r5}}, 0x1e) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) 23:25:31 executing program 6: r0 = io_uring_setup(0x5885, &(0x7f0000000480)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x313243a2}) r2 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r9 = getpid() r10 = pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) r12 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)={0x2a4, 0x41, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@generic="1011a130cf", @nested={0x37, 0x8, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @uid}, @generic="dd185e4f662d5da9919f1e201ce02fd1bd3c21bf7231a5a04bc0cf", @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x7c, 0x0, 0x0, @uid}]}, @nested={0x1df, 0x45, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @pid}, @generic="e74e8bfbd54b1dd0197b67835180ebd6ec0247b5d0992d3954c8737576d46839892a4f41a471a19f7beb9fae2cd5f77c2e8fcd569a1253058e54a4c7bcfbdfb146a562ddc5a2f29f8ad6339cea6b483cc8328a825ea8b64a09f275dde35b1b0869247066fb15fa5c5378a94460762987412726290737460f7582be8fc50e59e50305c4d39e7f86c93d65890be5082ea910b90cb084380beabcc9d8c7432003066fc21f053660d742", @typed={0x8, 0x32, 0x0, 0x0, @u32=0x401}, @generic="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", @generic="8d8691f08dcba2dbc8c2eebe88607cd3d8", @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@remote}]}, @typed={0x4, 0x59}, @typed={0x4, 0x26}, @generic="42f3233019931413ab706d36146d1055622ef1bbe84c8aeadd9dbe85d400e069720a5cb070f8f10f48b4b7322b4f5943817534400806ec1861c95abe8e02cd6c5306fa2a0751b7bd3c641c6037bb1da4bda06fc68c127e445024497d2960d2b8db724f7b0a72c128ce6457a694"]}, 0x2a4}, {&(0x7f00000002c0)={0x18, 0x31, 0x300, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x89, 0x0, 0x0, @u32=0x3}]}, 0x18}, {&(0x7f0000000500)={0x3f0, 0x41, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x3e, 0x45, 0x0, 0x0, @binary="f0295945cabdec5f2711f7b5f7081aaf3a14c7b817b7d3d921d738717d18268b2cbd1ca353b5cbfd34457c011f36cba5f110e53ed8008f25c55e"}, @nested={0x2b2, 0x2e, 0x0, 0x1, [@generic="800a94d3b3ad79282c1fcf87ad2ad7ffaee6e25f566b6208e6b155292f1b98deec85b40de0c18de8810a07c89b595dd1ededaf0720760adb0153bf6dfeeb8c5922db1c2d2c98a2318ad3a28412865f647326708e779930a947de28f937ea586d2d3ca7274b430650c7868c551e82bffbfe2caa99517349390543600cc176bcf44e5cd900f6a903ad82dff60f5fee8c73063cf8c9d7b15eb061959e8513e81532d2ec5b01cce8c368924ec3e1ccb27b9fec8b29f20590d75ef4cab3", @generic="5ee03ce9384f3aa91f76b7ed65640da801271bc319b6dd136b1715baa29560e21ef9820021930c206373a71ee71725e8666542209c5c18bc12340028eec3824e4a90807186d311b21bc12216e765eadbeb255fbd5958", @typed={0xc, 0x5b, 0x0, 0x0, @u64}, @typed={0x8, 0x1a, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x85, 0x0, 0x0, @u32=0x7}, @generic="7a38c578a75994552a63be2d69be7b999eccc7c5b52c1974771f96dec48b0640feaa0c1ab52036e3580ad966ad1f43e6b93991e8058e7ab00a47e162cc7cc3a37c87b8954dc97da90caf2633bf85abd11ad5e5f03a663f443042a1142a0f6c7b551f350e4ba0fb93772310a57ef64895206ec0125dd6253cc7bbef819999171c91ce740993a8de8957ae9b99af4d8951cf", @generic="b17af8e702524bc0253303c590aacafebaa3c0d824b8320eb764bf8d7209b672ee6c20099e13e226d91bc536d923915623246e4adbe50f242867ed0beb7b5bb222d63b123656725160a89bf81b77772714262a2777fa0e2283e75f6bf93e2893ec21aafd5a9a8a3b15bf237605a245ae5762aed730ca60bc7403655d1f883256361715145fbf3672dbe3e6a8b96d5475f08c2bc75a5a7fed492694edf254d33c364efe22690c18ba283a07c5f1c0012c416360689eb94f02d8d658c5f63cf5b680da229f8528dd53cb61b635a4bc5af7769acab36aa1d118ae5ab9b45a7e186df8a40d28d01e4a5ce885470f1bacc3df"]}, @nested={0x59, 0x64, 0x0, 0x1, [@generic="804f9d2de630af9242b3fa0b30c6ce74df3eedfe23fa1c237183e4655b2e30dee7cfd693c580bafff77acc52dc36eb8225690b0c95", @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @typed={0x16, 0x71, 0x0, 0x0, @binary="77ca7b83e8565ae3d973c2463bd00dead0fd"}]}, @generic="f310f801b92396dcce2cdd21c6ca2fc632f4e49c07ae272d96433d0c20d20fb8b4f9ce5ac9a6aeb979376e97459b44db5518ba624a020be56f55562782594600d65e674c", @typed={0x8, 0x9, 0x0, 0x0, @fd}, @typed={0x4, 0x76}, @typed={0x3d, 0x24, 0x0, 0x0, @binary="c9ea8f959607c5a7a15525090aa3fc7484125937edc7a4468afd84b6719f8fb7d9ae4863adfc6853d28a6ad63cda4bef743937353e652bdcaf"}]}, 0x3f0}, {&(0x7f0000000300)={0x14, 0x3f, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@generic="bcc3444c"]}, 0x14}, {&(0x7f0000000340)={0x24, 0x35, 0x4, 0x70bd27, 0x25dfdbfb, "", [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@remote}]}, 0x24}, {&(0x7f0000000980)={0x190, 0x1d, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x84, 0x2f, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid=r3}, @generic="8029c4bfab8f2a5199979b4cdcfe247ecb7d872e377319ca10c13c682ad4eb144ea165b3107a36dd042eb1977f11459b9bb441ed2f48a02dfb42992a8df464ee7933a8322b0783d98466098a1ccbeaaa76d429c299c540572c1e2f8262abbf9705d8c641a043620f4647845b50d8534e954ab1ba4797776a"]}, @typed={0x14, 0x332a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x2d, 0x0, 0x0, @fd=r4}, @nested={0xc, 0x5b, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd=r7}]}, @generic="bc976d3812b5680c3d1234cd634b3211819200ed474896683feed63cb80da5b64fe6f1ab4cdd50107b98ff2355061eca564a0a280ab62f5d595f044ceb00e62cfde7a169069d6acb38131df30b850b09fe6aeb61395fa368cfa61e5f14fd1c55baca9fc08704db747c2f1f530c6383089ea57d5e3a3c77adbbe7e7df19f284a1255ffdcd9074", @generic="bb0b9b52207017a6311d750e4483866780ebb308d74fae0c5f59f05b8ffa22dd4d215f70119c7b689e389d841bf0d97729dd817edb4611b2533fed229f40cd85d524e81e8f79eff9285a8c"]}, 0x190}, {&(0x7f0000000b40)={0x108, 0x37, 0x400, 0x70bd27, 0x25dfdbff, "", [@generic="6bce70a860d39df5a411a87fd6ad89314567ef67d55a3afeed08e476ab31c30d3205e91698569506d1103c4920afc1c533bab54ca9f76a9d0019dc487fe59068f1c363168220dfb68d773b389ac514c4ab6b06eef86b70ec69a1ca94b7f85e275fba618de7718e96d2ff6a4f4bf5ebbd8b2f3c7b77ac3e5414d7f75967cfd74a33cad64cbff4d4f9c51495b1d37dd87dafa1d00dcc85fa5969a6b45a27fbb38eaa8a206cc5a5c7b9311016d83f72239802a9c05c1bb2edf098a97d1efecdd7a299e97d262246a176f4d79f5bd487e4b891ea997c777cee526aad1c74250f681a775a7acce9d7c00e2bec77349d", @typed={0x8, 0x45, 0x0, 0x0, @fd}]}, 0x108}], 0x7, &(0x7f0000000f00)=[@rights={{0x1c, 0x1, 0x1, [r8, r11, r12]}}], 0x20, 0x880}, 0x4000000) write$P9_RREADDIR(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:25:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 727.611346] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 727.621720] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)) [ 727.718085] 9pnet_fd: Insufficient options for proto=fd 23:25:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:25:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 7) 23:25:44 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:25:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {0xffffffffffffffff, 0x2200}, {}], 0xa, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:25:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:44 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000280)='net/netstat\x00') fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) r3 = getpid() pidfd_open(r3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xffff, &(0x7f0000000140)=""/167) getpgid(r3) 23:25:44 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000540)={[0x80800001]}, 0x8) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x100000000, 0x204080) clone3(&(0x7f0000000240)={0x3102400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/20, &(0x7f00000001c0)=[r0], 0x1, {r1}}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 740.096194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:25:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 740.121673] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 740.135292] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:25:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) (fail_nth: 8) 23:25:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:25:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 1) 23:25:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0, 0x2}, {}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 740.347238] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 740.385205] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 740.394611] FAULT_INJECTION: forcing a failure. [ 740.394611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.397224] CPU: 1 UID: 0 PID: 7327 Comm: syz-executor.7 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 740.397270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 740.397289] Call Trace: [ 740.397300] [ 740.397313] dump_stack_lvl+0xfa/0x120 [ 740.397377] should_fail_ex+0x4d7/0x5e0 [ 740.397439] _copy_to_user+0x32/0xd0 [ 740.397501] simple_read_from_buffer+0xe0/0x180 [ 740.397555] proc_fail_nth_read+0x18a/0x240 [ 740.397613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.397672] ? security_file_permission+0x22/0x90 [ 740.397731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.397787] vfs_read+0x1eb/0xc70 [ 740.397853] ? __pfx_vfs_read+0x10/0x10 [ 740.397908] ? lock_release+0xc8/0x290 [ 740.397956] ? __fget_files+0x20d/0x3b0 [ 740.398031] ksys_read+0x121/0x240 [ 740.398086] ? __pfx_ksys_read+0x10/0x10 [ 740.398158] do_syscall_64+0xbf/0x360 [ 740.398195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.398231] RIP: 0033:0x7f6e03eab69c [ 740.398256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 740.398287] RSP: 002b:00007f6e0146e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.398318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e03eab69c [ 740.398340] RDX: 000000000000000f RSI: 00007f6e0146e1e0 RDI: 0000000000000006 [ 740.398360] RBP: 00007f6e0146e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 740.398380] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 740.398400] R13: 00007ffe7274169f R14: 00007f6e0146e300 R15: 0000000000022000 [ 740.398461] 23:25:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 2) 23:25:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:25:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:25:55 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:25:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:25:55 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:25:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = getegid() getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r5, r5]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xc000) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000180), &(0x7f00000004c0)={0x0, 0xfb, 0x86, 0x3, 0x8, "5646f04f554f970aa1df18feb25a149b", "ff4dbd8f90bc02bd29ec210448ced4d3454b821881162fa68393e7c5c587c45f9f0f5e8c6fbdb21005960f1a6a25afee431c30fea30da73c189378d597d09e0ae84601726c8770c6f513eb4571d2559f8c2a5439f3c9846bee02ab466f80d00b1e4fc933d022fbfdf8ae86d259c9248e34"}, 0x86, 0x1) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000001c0)) getgroups(0x6, &(0x7f0000000480)=[r5, r5, r6, 0xee01, r7, r8]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@afid}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@afid={'afid', 0x3d, 0x6}}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x4}}, {@loose}, {@cache_mmap}, {@mmap}, {@access_user}], [{@dont_measure}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}]}}) creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f45", 0x5b, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00000000070008007809140b2a3a0102", 0x1a}], 0x0, &(0x7f0000012200)=ANY=[]) [ 751.990348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.009729] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 752.017145] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 752.026476] 9pnet_fd: Insufficient options for proto=fd [ 752.046536] 9pnet_fd: Insufficient options for proto=fd 23:25:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 752.065931] 9pnet_fd: Insufficient options for proto=fd 23:25:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 3) 23:25:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x29, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:25:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:25:56 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) syz_open_dev$tty20(0xc, 0x4, 0x1) setresuid(0x0, r1, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r2) ioctl$VT_SETMODE(r0, 0x540b, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x80000001, 0x8000, 0x20, 0x3, 0x15, "5b53b2077faca7c17b7bb4f713c674f5314477"}) 23:25:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 752.219514] FAULT_INJECTION: forcing a failure. [ 752.219514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.221319] CPU: 1 UID: 0 PID: 7365 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 752.221353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 752.221366] Call Trace: [ 752.221375] [ 752.221386] dump_stack_lvl+0xfa/0x120 [ 752.221438] should_fail_ex+0x4d7/0x5e0 [ 752.221491] _copy_from_user+0x30/0xd0 [ 752.221542] memdup_user+0x7e/0xe0 [ 752.221583] strndup_user+0x78/0xe0 [ 752.221626] __x64_sys_mount+0x136/0x300 [ 752.221671] ? __pfx___x64_sys_mount+0x10/0x10 [ 752.221753] do_syscall_64+0xbf/0x360 [ 752.221785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.221809] RIP: 0033:0x7f163cc09b19 [ 752.221828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.221848] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 752.221870] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 752.221884] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 752.221898] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 752.221911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.221924] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 752.221992] 23:25:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 752.265041] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 752.270052] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:25:56 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:25:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:25:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x106, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 752.473032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.477378] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 752.484452] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 752.501738] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 752.511345] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:26:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 4) 23:26:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:11 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r8 = getpid() r9 = pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r11 = getpid() r12 = pidfd_open(r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="2c7766646e6f88", @ANYRESHEX=r12, @ANYBLOB=',\x00']) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001fbff0018000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) io_submit(0x0, 0x4, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="75b2ea9715b71639817d2bbb9652105e64ea021c1f852521914fee37fb211ed0890e4029da354a2fadd7ab05e3e9703eabd82104a94c17787ed00ea3e812d7152e8bb62bb34122a2f985129bb77271d3143739360b74e4fbd19873289c26f4dedacc1985a9030a7708d860cd182607fb8d1f1e59e468aabf0c1cd3f13f70ae609956e0f13f4deff82df91e54d4504d8419cd016178b6d838aa93e0617b2539bbd45f194093adf5b51633d69609eda6bd773a3c12321d0dd350a3ade55b443fd8a050beb513741e700d8aee34e8348b603ba19dd60f7d07305efb41c4f9569ac2f6", 0xe1, 0xff, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f00000001c0), 0x0, 0x81, 0x0, 0x2, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x45c, r0, &(0x7f0000000240)="f46cb4dc8cd34b63d62ce1e5eb682bf4364cc498448c6cb5f7a57158d0719d283ce232676a05f652eba702bb9057cee10348f71f6141f80de5be48779b13e13ddb165dd2828d784bacfe092a17816ae3adb5f0c26d20c6e56a8490b335796b350fb201474d0ba8373fdba60945568ce4a87c9d0b52f782b254d5fb20279a41127d5639eaf6f656da1352fb7afb32cfd3c552280d2dc2cff9f88fa79c2af61077c35ea2f207bb1e025308ffb3f4834942b33833e3cb1e0a8bdd46f5bb7ee86c7b1ce2", 0xc2, 0x6, 0x0, 0x0, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x4, r12, &(0x7f0000000380)="66507034c8cf2a74d52e5616972e0e46ee41488a8ea908918311e2158486cd90b20a451d74b944fdc7ffb4a3323a97c272f3c2e23ee28080ecf91700f44a1b5d8a1f4bb2fc6e231862d19da97cd100ef6ffe423a3ad6626293e0998c552890a31586656b6b9b66c37a2472550bf0c72324", 0x71, 0x9, 0x0, 0x0, r13}]) ioctl$TCGETA(0xffffffffffffffff, 0x80085610, &(0x7f0000000000)) 23:26:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:11 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:26:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x109, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 767.155802] FAULT_INJECTION: forcing a failure. [ 767.155802] name failslab, interval 1, probability 0, space 0, times 0 [ 767.157451] CPU: 0 UID: 0 PID: 7389 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 767.157480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.157493] Call Trace: [ 767.157503] [ 767.157513] dump_stack_lvl+0xfa/0x120 [ 767.157564] should_fail_ex+0x4d7/0x5e0 [ 767.157616] should_failslab+0xc2/0x120 [ 767.157643] __kmalloc_cache_noprof+0x6a/0x3e0 [ 767.157692] ? copy_mount_options+0x55/0x180 [ 767.157715] ? _copy_from_user+0x5b/0xd0 [ 767.157768] copy_mount_options+0x55/0x180 [ 767.157806] __x64_sys_mount+0x1ab/0x300 [ 767.157850] ? __pfx___x64_sys_mount+0x10/0x10 [ 767.157924] do_syscall_64+0xbf/0x360 [ 767.157956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.157980] RIP: 0033:0x7f163cc09b19 [ 767.157999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.158019] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 767.158040] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 767.158055] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 767.158068] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 767.158081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.158094] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 767.158161] [ 767.226900] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 767.229506] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 767.238961] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 767.241828] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 767.256602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:26:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 5) 23:26:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7, 0x0, 0x1, 0x2, 0x8, 0x5}, 0x20) 23:26:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x10f, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 767.449982] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 767.459927] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:26:11 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x192) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000001c0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) pread64(r3, &(0x7f0000000380)=""/101, 0x65, 0x100000001) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = getpid() r8 = pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="3f0b0000254044c0f7874f00000000", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000200)) dup2(r2, r0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2300, 0x0) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000180)=0x800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) [ 767.481866] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 767.487011] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 767.490268] 9pnet_fd: Insufficient options for proto=fd 23:26:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:26:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x110, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:11 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 6) [ 767.686431] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 767.700347] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 767.716168] FAULT_INJECTION: forcing a failure. [ 767.716168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.717745] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 767.718099] CPU: 0 UID: 0 PID: 7436 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 767.718141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.718158] Call Trace: [ 767.718170] [ 767.718184] dump_stack_lvl+0xfa/0x120 [ 767.718248] should_fail_ex+0x4d7/0x5e0 [ 767.718318] _copy_from_user+0x30/0xd0 [ 767.718383] copy_mount_options+0x76/0x180 [ 767.718436] __x64_sys_mount+0x1ab/0x300 [ 767.718495] ? __pfx___x64_sys_mount+0x10/0x10 [ 767.718594] do_syscall_64+0xbf/0x360 [ 767.718638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.718670] RIP: 0033:0x7f163cc09b19 [ 767.718704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.718732] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 767.718760] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 767.718780] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 767.718797] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 767.718815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.718832] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 767.718917] [ 767.740464] 9pnet_fd: Insufficient options for proto=fd [ 767.748854] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:26:22 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:22 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:26:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x117, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:26:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 7) 23:26:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:22 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() perf_event_open(&(0x7f0000000180)={0x7, 0x80, 0x3, 0x80, 0x7, 0x2, 0x0, 0xfffffffffffffff9, 0x1000, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff0000, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x80, 0x2, 0xcb4, 0x1, 0x7, 0x7, 0xfff, 0x0, 0x8, 0x0, 0x1f}, r1, 0x9, 0xffffffffffffffff, 0xb) r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080)=r5, 0x1) close(r0) creat(&(0x7f0000000100)='./file0\x00', 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r9 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c77666db66f3d", @ANYRESHEX=r9, @ANYBLOB=',\x00']) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, &(0x7f0000000640)=ANY=[]) ptrace(0xffffffffffffffff, 0x0) [ 778.413576] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 778.421564] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 778.425081] 9pnet_fd: Insufficient options for proto=fd [ 778.449658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:26:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 778.461533] FAULT_INJECTION: forcing a failure. [ 778.461533] name failslab, interval 1, probability 0, space 0, times 0 [ 778.462771] CPU: 1 UID: 0 PID: 7459 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 778.462787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 778.462794] Call Trace: [ 778.462799] [ 778.462805] dump_stack_lvl+0xfa/0x120 [ 778.462838] should_fail_ex+0x4d7/0x5e0 [ 778.462867] ? getname_flags.part.0+0x48/0x540 [ 778.462883] should_failslab+0xc2/0x120 [ 778.462898] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 778.462933] getname_flags.part.0+0x48/0x540 [ 778.462955] getname_flags+0x95/0xe0 [ 778.462978] user_path_at+0x27/0x90 [ 778.463001] __x64_sys_mount+0x1e9/0x300 [ 778.463025] ? __pfx___x64_sys_mount+0x10/0x10 [ 778.463065] do_syscall_64+0xbf/0x360 [ 778.463083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.463096] RIP: 0033:0x7f163cc09b19 [ 778.463107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 778.463118] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 778.463129] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 778.463137] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 778.463145] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 778.463152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.463159] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 778.463196] 23:26:22 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x121, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:22 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 778.550353] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 778.557970] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:26:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 8) 23:26:22 executing program 6: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x6, 0x6, 0x9, 0x7f, 0x1, 0xff}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) sendfile(r0, r1, &(0x7f00000000c0)=0x5, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xc6, 0x4, 0x9, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x20, 0x180000, 0x9, 0xffffffffffffff00, 0x800, 0xfdb5, 0x0, 0xfffffff9, 0x0, 0xd37}, r2, 0x3, 0xffffffffffffffff, 0x2) sendfile(r2, r3, &(0x7f0000000200)=0x1f, 0x80000001) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) syncfs(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000003700)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0xffff, @mcast2, 0x8}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000300)="0cb1d67a428eb577463c7cc8b8e9c58c71b92bf18331426b690470fb165b6ba1c03b5e3d84067b02e86f43df0bb2871de6a54adc2913b7e63a585ec087282f50096a33bf5d7264f4bff5c58075a7f9cebf074909d64003d6cded84446dd485d4d6d7df566f3b8e45eda811360716110159ae71b4660fdd51c63696d2f2af6b37e52f5484b0a0841ca39e233e95cdf729a32a5b11b141d664181929478b74415f929df719f9b8a1ea3ebd417daa4479ea89256e8f8e516a589fd1fd228cfa46ccacc77097cd854b6807a3e9782f8100df4fc0c04690502bc9e54766b7754fb09af6e5399f13", 0xe5}, {&(0x7f0000000400)="eef651c77c82cd124b7f242c9243e2a659ffc8bf734f98126ed9b2523479901e727031277db12de9482d0f6824fbb4f95578dae52b28eb0a3eccbc20029d1ae92dbb86400bd1f3bdfcd9d167483f6411bdbd5d3e4b55a0c4f6d1a90d30d4be18e049483675570e7819d5be671f92b41b23a1b211707ad689bd17f2d03c2aad2dfafac4d5e66ed1c174a7e8cf0652551dcbb09e6dd493a886eb8cb39fa90eb9e208", 0xa1}, {&(0x7f00000004c0)="cb18ddd43f16fdf7f0e5f813d62a3775e22f638f452c74b035f3e5a77bf21aa608022a49b5cf5f7ac63df88458058116897480ca473e", 0x36}, {&(0x7f0000000500)="318de051634e0a67ff5e9657b83a25f960c98e0a49329e5f491bf120ee226ab1c66c2e1258443ebed28814ca0f291c5d084f26f795e1d714f78ccb603603272f7532a411a4767ab0029f7bab195f3535b2f8d4959a4ada74ce163a3d66bb475a9b0ac116da2c7068f6cef16494e9a8def9d667ff90af27ecb81e3d5c4ea8d8c7349f87e112f9b0dd45de1d7d5d830ad312f86917549f0d6e393d1b2aef5000f6d50afa589f696afa36074843e90876027f9516326bf6da30511091fcd3e46dd682543e8d0f8faa205cb08e2b3669dcb360f4f33b67e3795ffb69e63e72d65a6a54dab8089baaad1cdcfd23968e354bf038cab395ff37887b8dd601209525ceb55583e52d693c882c9b75da78b9f35f4a79835317e83640bad23644c6ab3cebc67e7d6d2d2d88c76c5773bf1c7cffd3ac882a84483ba0cfb3ff311bb1c12922d5fef38ee438138b1c8ee116f0cec691789aced2750ec70374f7ce4c431bb02dba811a00777e13795c74ae66fafdad4c978665ef087c91a1c01990c4d79d34fce6d89bc45d50582ba9b9ca6abd817a3a1ca9dbf886aad16d0076574cf62fb0b78464306bd9497b1dbe9c238548395775fbaace607333849493e6404514ff0a0a131d69c3d2b9ab01ab240f0c6bcd3a2dac3a9412fcea4ddaffc021a760d4449ab07179d53c839e59d06e7382bcfcdaf5ed1e70fd59bbac1b27f365bb3a895e72759e66c5ad59d51ef64c4e4ba808642c210b734e95cbd7101bd42161672b599c6d035b8c76091f015997a7755bc3a22cd0bf91549765a26af6cfe6b8eb912c35c79130a67762e2a8d1dd49e7ea103cf060cd834b93654e9d009c582955e80961c3067b1f36c4192e02d38d25047d41aa8e840f2449aa1d73c37866cf551d685f1203b578484dbb4f73482d5bd400ba910536ff925a3f286d2236842aa0c0a8aab04f4dec9dfd24826f9ff203655664e5697c39c5052324efecd5d660ec0380b210056be43aa0a3ec8b61d8a5dafda7e804e984685481e098b9ca626b5a14a601624cc17524f59b2b20dedd9e05e3df17aca9da912adc910c930d899e720dfcd0cbf818c89cc326a7512e3ba9a542ff61f20ab49830a434067006de4b1e8d753aae764a015e2575f76dcc624c97d1080dfc62f797f35a827efcc37ee5e8311e0c81ab7799f04212bf46f4f27d4721dc1d6e9244c6a6afea5d36a8df697c10dff245e3b2b0b5cfed7b387677d1e3494753da465993076c05d301391854d1416808280bf13d52d17189ca3637834b55f015e73d88fdb4e91d6e4fa563de1cfd228f90f8c4e3cb6dcb44fb044d74f8675221457f21c3fb640099793eeb351f16831f67847cb144199d80649a3cd15e994f173976f57461cb4163051c26af430efa8ec19faee2b9acac895184341fedd54ec3ab3d44481ff6639ba2782bd4cdb59a637cdc14b4dba5f950a8b693d1d7ca82f87b9a588bfb2058b98e92744fa8af4c137e5bcd8651dca5e02a7f13491859ba2274428846ecacff75b78e73c321db6bb97f7637341b92b452ec70453ae1c2270c2af1a8d1549c5d39b3acb02d06a69451bbd457f21f7bcde1aa84f48772e13c00feb932487c8de0094f59d7defd3ce5b55736d2d09c276e5e6ba8af7317736e39c7b95f88a2f53c6859b0ef2214778ab7a718e300609691ef4c988d4def59ed835d134458481a0acbe1542ea25d02c81527c09e58871492026c0763f0b261c011a377a9c65b618c61f8ca6991eec7f8621befee3dc21c1bb5ab3277faaffea000c4c0320821e21acfc0d5aed5df957fff12f829e1454478d23b947b902a329a04e0b5a21ad8ff95e5257f177fd5587c93fee67f922b9e0de31b66384e4d509750fc03c4220732745faa8ceb6e5dbf5b1c6e36b8ad3c87d82054952c78a601f317635a076110ac9e4760760eb847de92f20443b945947a44af68ee55556f0607865c706d889754813ee888cf1215e81beb7748ba906df2844dd6b2a66faf054ae2174fcec62b1ea56a21e98d97a53680f0e43f534fcbb4b4835d4c2e3644f094f84aecde89af4af4c8982b020a5dce4c33660fc4fa2836954241582511eca556a35c8154a6c58ce7943c845b35321a69e91d95b4fb98cceb5797304db4e7dedce09fa4eda226df8b6b5b0f1194f8d28e30f989a3fd75ec2616d30d4aa73c32b7c57e34bb244645ddf21127c99aa7ae5102895d67e634757ffa8062507518256fb609f45be05e6d0113ff42167c5c48de58f0abe57ecfb4bbc5e3dfabd843ac82065ab37ed8a49f237a987f69fa2e41646ff4780ee2070afc47fef347e682c9d70d8d5cceb566ec34d342dc3efe04bc1986e12af6be653c35acbdfbd2e86ccf0b902eff8fa63c6d683cdb4975c74b1abec9584e83e958df7092db67236f59cc42abe18c11a8ec29ed682f0d7935dcd8424fcda1defe047d2b9e4c8cb375eb9acf4aed98584188083fe49b1936224ed15aaeda2f52f0cd33eb533cebf873a8a15331a27c1e56f0d53544088752622c719683f882a44d39b8cfd703e85d01ede655eb443de2eb177fb8076a01b0a7a90547de861d8c4339d8484af975187bfb67c0f5793223c248c1d678c4e9f43e3d11878ba5f7311dfd7a23ad46763cc57afc48a31822b40760e9837b9b92b48b6ec3ac94fe8395c31c1c725f0f1310942dc84645259693e7e19def22c715721d3eff5cd6f40ceefa5373d0503a7a2a8c4e9c0d1689a64cfef0d99cdf38a96930a8c7ec7ac6e6adcb2e158dbcd108c21cc93e32222360b09495f727d008e9206b4eecbf46ee9bd1a62331d856578563e83be45e9fbf3a2a765286bb13271c9ec85e06854693a729c5330c5615974189e62898b472fda9f57d0f739e0d3cca839da929913771f6cce90aa558929136be9653c06ae06fd70b54972d80670206f3bbcf3919bcfb09380a21acc1fa6090139c4dffa9a35fdac452d0206c84cf55aa4a966550dd8a2d2dbc8f33186ea8129edb1d19f1272f929a58fd88e57ebd580a3598082d412dbc2029f486ff5789e539f1bd25882bc9baa8db09f90f8386d9adb7437fcbd0a28c7cc75c61976f84178b8b42aeb566ca50ed4c675587cf9250f686d42df5fdc26f241cb3ac9f80bfe482acdd2ace462d44bf516b518f253c3b03f05e2dae269a3243b89e913f25c450cfa23526f94ca2bd50379357051a32958368a5556a40cab6f98fb38832790ff9050b976997b446224e65329b49325f0c09d401e7610dc181924e5d80067975603adc6aebd472c4829eb912f80d88a00a6b9a6f950f38824ed510d2c3cccdf4b57bde559f840654534ac01361915d1396b3616ea7ad84d2b1cb9285bb74a970c7c853ebe996f35aa8831d91c47820f6fb74ca4db39deaa9d4dfd311cd60e9671a59f81beef3717f0fa737a9ad8e6a59398de3f605030e4856fee1b4514309f89e55a91f03744402c64fc48833da5c597856c89cc9395a5efc6eeac78a03ce46cf1670831cd00e207676850537283b127370f07089bfcdcac308db6eddb09f384cd030b9a573d4bc2d1925558eb3063a376d0ea192fcee5990b7a4ab63a83f955d22d204b26bf3e717b5ea684f676b23782aadd384e35d9bf3ed7c7abf581b3a2229d2133409846d7115274684510e6395cb89c82931c20e9628c1eaeb4e640d03f3a77fce35cf72acc428978dd7f3e9927dd9e5dbe517ae7d187ecd6977289e9d7ddcf9221aab2dc82fda0523c8b074f364717c7d2107ea26928ec2ea570957b492c78ab7940dc2b5287701913563ef5ad5293235aaef7ab719c9e46ba7eefb6cd5dae2a0a963e90da8ce0221d6125ea3e9eb0e70e1ff713083def8a1a2836ef75373e28ef169edf8556b73ac09c0265104af79b05efeca40a06b0b058eb1214c652e16f9b58888729e11d57d613778e60413af8575156139f47687ecfe371ec5c2afbc56f8c73e46dd1ef933333a908be4f6fff9b02d630b33689708cf274fa52507d7a1cb11a25a4458ce0ae494563d138700c25aa3b7b129b4b985a9155f333701afc276d47f5ecebb19ef0681fa916b98fde90eff856c3b78b0ca07e6ecee9e15437c8f2b39fce34b19169bd635a8717fc35a30db2cbf178c5a0b9c3d10aecfcf5d50efe68a88dfa487d072f714c34e015d9af0165b97c6fa3bcd5f29186b392bc8b63cff42c5782d2b75c8bb85afcd438290247c15b49f2d8976ca46da26f6d5d5a4633ba8f54e14a271c2987fe3c2a0267f799a3dcdcc6639d39571da7f49209d6c21dd0d727849189a6fe8eaae2f5c331908fdde8654526319865ad5cd8f231723c977dcb0fe7da9614857b0748d5f79f6b156c3ac30a4a9fc017909a7fc6713d007d0a4d990389fbf43e29ac0969591966e95d4aa36b2367faa1de1276dcd2c739617d1d0d67f426d8ce34ccc41d893acb1cf653702791fc12f9bde1c636f4a68ddf6173b56a4c718352a5f179b719a27d92b1e26795e0a7232d6f95e7a85b3cddf9e4d42e75d10ab1a00d2dc3798f88f13fd7cb34aca90d53480fa076aced0936a62c220c05d8813c049bc96451e06aecdea7d5b434596a29e6758038bc7669c3b5145458fa45152263f393f987252f6ac4e623a8411fefa7a194c12ab4d58ba8c3b506645cef86e3685ccb0a97b55485b9c95273c5db5bf896b55c08911fcdc7df10a87545674392ce4fdbfb89d93f8233ba75f8ef61f4ce5b74f03e76fed6a5f9f4f1918a451b3bd28ca0e57751871ced21144459c3e2e71642e00eeac8f461ff60873bc0b2f97b62203e53a1c52a289f851c6465d6b40a5aba80e7cfd2f8c73f0154355fcad52fcc027c3126369fa9641024aa4edac973f85d0851e731265387b85637f4769ef0788130ce67b470d71964f76f6a1e3b9c079330adde65b6f63935c4a6f64ba96572e12659f67b8de93f0cffe98712790faad385aac899a96d907e761a65d5c3179d30fca824f21967868115cd1e9b0ee9037ed090ef6c342dc37d742df0be171f18fdc9b1409e748d1e8d21661819b57974ff105db713192489e610d5467d37d7b0e1a23030ca1205893a6a9b4decc3e80060bf3948d42f734cb31f6733167e1e4649b11a30eef66059d6c1c7f5178e62498a8132ef5e2394edc44898e5d37ad175c135d5c22c69744fe7d5cc52025b6f28cf0920951401c1965a84f44f0bfb398551f366ef6f4e0e3379c46e8fff9afcb0567242a263371ca3b1a928343adf079da45661aaf0a81fb0d26bc15b5c6130ce8af81da13eede25426725f5390e709d0d4674e271920c3ec8cb5fc48e26e932364a75d5ead095d5aa2b25a2608a5dba59c4d4cb47b074c2f82e60bfb1cf8e0872328a4f351c0134c5aaf9bae295caee631424a20785d74059ea210c70e115f1eb964769e49d51ab93099374ea945ca153e63623e21fff7dc5f9a453eb0a71e4d311a5ea6aa9dd729dd8354e0631f37db945a466e784ee459606b507722be2fb3076465efbc97ba15504b2ea77c0ae6cf148518f843d3ed6e40481e6431dc0196c1c9c6f58ff43884e85d1b33959519bef4ba82f9c4a6357c1c43746633ca46be75807a65b6153803350b5ea39b2b6d79613bf9a42970244db7f602fc1721e54a8da3412a9f629780380e3c8454d7d3510ceea9e2cb578d67608ad82617ab41b461cc27211fd06fc540b215b71e022a95af95dd93fe467d6d7f4cf134ff8cae28bdee347deace9f0485cada828a1d6171b7f180597438d97843ca19a9e9c5643216df20bfd76e96b9ca35986c6063944035136af21c330417a92", 0x1000}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="84bc12a988615449d688ffc08e534ce68615634e389d3039c271568613b57f89eb40bb50c4fa86ef07594bc20bb7efe49f10c885ebe786e2ac2165c96e0d9fdc4efe227ac756788b987fc1ba7da669b43249d976e391b6cd836234caca41cdaeb0be18a9eb9e9bc281250ee4f880ef2b8f7a82465e8fee50dd4b2c1f787bd57a09b19a74a1198130fab6b5b5d9ea6ef81ea6f758aaafc06adb2b4aa5b14c24c2fd9a93b285419e62b93ea79e614c485a5857b59f4cfabeba9ac50e34fe07fd474301bd615f73db441bc25995405e19a76bcc472743be349cd3fe2cfd2d0cc7ee075dcd3743275c1f7bb4be95b4cc0f9c1a6aa76c92", 0xf5}, {&(0x7f0000002600)="4a549416f50be77ca726a76d1592ee66b9809cdba2091322fea53f767d82dcdbe4192f69aac01430eb907549e37489efbe1424a799c9f7fdf91b7064b3e18a6afb9603ae858d6920e6ba1be2435ee2e2a062cc413ee4c6c07b3e7a5471001a56ed4a41e34a7cc42de9826c8246d752dc9d98c22caf73eb2cbc19da051fa5ff26146db4b5a57b238ffe7f31c397563f1444a000eb0ad7ddb9052726d0f40d6e057a688f3aa4ed6fcee7afe90dfa00270e7a74d16cfd16bf476c02ef62cf5de23ad630c7bd7f2178bf10ec382db9fbad61fbd9e9acb7fcc944d6ce1add64a11bd56d9a65bfe4a0fcaad2d88182eeae7cd7a01659dd15588458f43b5823a159589c1aecfb66ea10bef84500c56a2bc8dbd2c5d9a5aca608fd92ce73246fe49d0dae0cbb83396bd26f0d56e7b905e4813498114af8bf2909f392959e21e5b2e9b54379a78a477e7862c54b432b1998acf489bc445f1c97ca2524342eab3fa5cd8b558c4c9e7351aada4b7c8de803b6c649f0deec0bd03697634b424dd1a41f7711144df41ed6e22efcd76d776a9effa5950680602fc06d945fc39fc7051dab1d38eb36aa6a6ff9a9b42cb728a2ed266c9907853c230de10da2a117c025cd9fb1ceaa71ae3f9badcac46f0585abda006b20645fe415c03e6e4d073a923396bca84b8bad27f861278c76d3f57043bbf6e5d2158c224f3fa952981a51ca302b32af185702eabb0a293a1b82f387edde6440bb12dbc18b5cb3326b1650fba01165e9827597d40ea4b3a45040948cd584e3bfe229706650c397847adad99d0efdc3191e08963e4725ccf0f8faef63d5650c0f0930f7373d3f138d147c2ff2afbdfa55ca3fde515a54287e46cd4adb9bc0d2943445d62827407c65cdd8f0bc04668592a12e0a0e56b6904bc84edbb896b518a866d028719bb89fd92bf6f2dddb1e808a0f909d830fb44dd7b5467dbba9487b8e00d94d02eba853c06a2f6b327c13ed40c28651c71f6e89a53b8c2383426ca4f18d6b4233dbee0f99f78189e08aca80ff9234d11499ba3c61fe4b876c56caedfcbd8f2bad13033905467cfb1c4037c965ea4c7e1b5df42c18217fca3bd82a2c59be93ccd456b920e9818884e2e9bd3b477a9142a37f0a7d2bf17b038828590d124b7d4f8080c5a07de8260eae693925fe9550c3d6253564942f4db25b20fdab3ff0be1eef1b5d7e5149ed35488676be64ac231cf29e274fd1865a7df45cdb85d527901984fd015d251115406f4b7f5edf4241005a629313ec7224bfaac1e8e7ba2bb27802ce7fbf83de5eecfc9d499fceebdf77b2b81930019e763a1df774ca7514ccd4fc9fa67f73fbea7429fa4e1607e38c25ec763d532d0be7bc533533da3731a1735c975605ecf17ed9f52861e4b605da5f6109bd1c0b7065f8f37f8a701505129500d4074f9c259e128c8902e826e7f339951c0caded32fea49e0967a3626c7088a1283e01cfb93840f00878dbfa042f410b6f0383e558870d30bcea295cabda765863bd79cb332c0e371fe502599ef8a547e2a8521751de97516a601ef71421721315ce88fcaf8017e38653adc497f3a8dafa449799d33c742326ebb77a7688e5a84e515abbe8d6551d06c2c4084bbf652828b1a5ad65a5a215f32f3f4108b3a7511ef9178dc74bc2cea7840105c2c2f0c0279a70b87dcdc2c262a959a8ffe317b5f1cca7457ece69e9dbf1c994b4f21d2f50c825c64146c510eacce24a4cbab44d2cf3a22006fba3c0babbc67b653bb0c91228a1ce3bcd366faa410a4a862e4bfa19a99748026342d411001480a5a396a5b522de04e2a359bcd50590e80035f6253e70cc171c9d3021b2f7a866e9be37a810b2e43d5bddbc825dad69696546631cfa7f9d7b66e26897fb3ce9bb907dee10139f1f7717ba9864020de1bfe8c9a6b84b1bad98944dfad88833c60944923dcf0742e7a97c79bbef0eb3ad6b5763c7fe931a2d1921571f5ee16233310cb92b64b2cc7d4c36ec5f7e7713d510869a40e5eec92f8ed374530b4f192dd592cc89cc87828e46da7aa7e3cb53c4f2c4e1b20c1da5ecbaa5b3164838200d05cc1cd5b6dc419e2e9ffbc3c5c461c6f025ce761b30aded36db82b6119049ac258c4c1416e03fe01445c6a664a9a175f12ede3d7e49d2ab7f2c27cad4b94a0ff629fee104144aaa36bf3d803948dc75284c7a9f364c3495d9ee57cc540beb0c747426216c62919ed7ffd9f166558c2ed9075c1bcffe169ed6bb34d3e5e441636f43c5a86dda178a0ee05fd6e8226b52efce267dc217623b44152a472166ea34c9b2225fc3c4f808df9639eb033f2c963279cd34660e0912a0e2bc6ac467eaadb19b996e3702170086a12f88db490abedf0c82118e212b98b07844237f64796c73092be2228d40e1816c6bc5bd6c6d1141f604df9f9b0f7f3dc7f15e2d3678185be56cbbac50b53fbff71ad63c34f09b848db2c4240836fc8704f518c988896912b08af69fcdd65b53dc7d98a940cf8bb5d8339e3210f7cca86008944ee9aba738b41f9e6519b98a294deee92c7d12f30ed941b3d2d0bc90290428265b2b11702a1b6aa9effe71fad720b467b721ee36582e29734d6004b2a4d3a399ab211b089415b7262ef79fe4d9a3f2a47e26ef8bea9e8fc0c216715f8d712333e8e836ebf79364cb32e4f5661ee86fe61c27f7d334fea8479d349110257dc75b9dfbe7927ff1b1754418f3466d7e9f3fc771d15313f7ffb669b6a09267680ac7831833c54f5cfa93242e41a3af6b10a9258d4638553cafe42d3d3ad975ce66434ef1327755d434d4e6e282b9fbb783e16ce1e3e470beac6b4fc77dcf61171679b79f6721a83db81676f18582337364748fdd5d9af0acf070e469fc642ec72f89e7c36ea51d81620025b59e3ea72207eb60a1ad9d6b1a662bbc0b057430dd6337224d8b18bf2aaff78f146fea2f24c7eeebbdf20296f89185d99deba8d659d6c6f700cd13c2a54240538c4019f76b7a07424d970d367253366f00a21f11016dc65ec835e5b5e87f93d40dc1a81fcaf15c7cc45e5f3772329a18677acf5575b4c3f107336b475a1f15a92ed2680ffe6e2db02a29c199dc0c80745bb7c902a251842408d54196d8a06c908041ae73c73ef2e9ee6a239376d9bdaa876a85b8d9b3321010c10feb779c73a925461a70aeba6a837a8765f023099ae3f0f4239cb7214749568e947f092de46d67c70371909ff1c2c25e462e2b4f4738a28936fa7797e4d8094ad0a31b8f12fd254a7dd19a8dedf654d4b09c2161029b3534dc0699813522d9b90882d8d6127c724ac56b4ab4a06c12e80fa572eed300c611f6ef253d9176752604b320ef3152aff83f8454f18006c78b82ecf64375514b59e97affffc8f1edf5d0c15610b94f288bcc6d00eb994470bb44bff79b5264919debad47f14d888e35897aa11b2299896152ef0add6be4df3e8c9971ce6d75aee1773cb3971a4fcc32bed751023a77143f906df447cfaa1394bfe02698628302dfcf2096fa26db1fd962b6f7420ca29fed886d27c0cf5907e3f60d93bf3aa73a366b97370a58656b0c0756a1994eb2d63662a13bf7e8b91ba9a18c7ec0969a0efa2f6c7b57230af587ada328be7475794538a20b21bc711f41a00d5300bc5038fec04c38dddbde29cc2a85d0f647e51dee2f93897aed1606bd29c72f4325d9f941acdd81c36c3fd434904d5e8865c4854844695499cd6ed31016b1a390d39a4f132706b3ddd843756ca8044ff6692af08a010c82eb60699e8a61ea2782ccc4559cbca9d0370de6cf887b6f6fef2b67d37bcc107436dd0b7a91cb810b27f4bf853138abc5d0d46cb2f30031dcb122fab6c7d8e2b6bada67e7d968302b87713b19335092dabba598e0f94aa75fba6d6f45abfe9a12f377ea3a7e11d4e8925a741d6e43fd22ebb1d78d722b502da869697aa346690665ba828f2ca6e463220da969a03904f3bf1bf18e5c407a2deb5016dcbd6df6ab6e411174191a247ce668fbdffffd11553e31cc332e2c17a9c6a9e296536e6f06a26156668fbc4e8e6ad938da408ae7b4d1c443a59b3d33f513b18ca1fdb23d7c73852e9e1b62bb9da5c1074ebc43bc003872d6b9a4b33240b68ef9e5cde5c193a1d42d182608ca6552919e5fcc909a8db80d3923a70d39c13afe3f0f1a08065d71a420cfdf2eed5e42eff178ca6bf24d06ac53327e44ec713d7aa4b8c4b68c9d45d69cf734e0f77552026d549f42d8e27facc85db89bbf40e4d69ac7e6a1507d74ff165325b94143b11ffe0c3058468c607b0520c3f8b3ef0a2ce3d56f5e4dda8ecf9115190c9c1f9a1e174af1e0f90120b586b44d04f7e69d9921e8fa0d2e4cc36a2f864d3c67138f6e53f6abdd04f1d14961ebd6cf1266898808e9676d25d1249738b02a3cc0d7e46ee31802eaa6795e08cc636de65ee7dc1db06f3ce2c5de9d8adfed4728bcf38baebf86d16a2d94a07d7bb54bbe8b7a111a3b4c865e4fddbdaa911859b10732fd07c7f7a5191d9f6f80fdf943abd8c0ad37af8d8e5f1a157acf13f64d6e3c7de613f880bbf78ac9c9b07855602d8c76c307753abd33bf8c1b7580634830e77d45d8c9b8e0ca6a6975894c089f382fedde7df2f855abc4c342e84a53bea3c3410da82c37838f71888b5bcf9ece9428316e19f37ad940cd7c696bf596eb4504dae4cab1150e1a231daffb8285164ae94e4195d4df23d496b4dc889d601d7e2f7f58d9b355398ce8e9f15b4a29d0f49c2180ffb3fef546eff768bc84dffcaab7a5c0fda5772c65901183fc24abdb7b6969404de8875e6cf00b33e198f809514980f4858651a841d585fa8e183c2dc155a744a28a7cf4c7159cd6b1f294d0703b71e20cfa3a4a98b38d0f8adec045715bcedcdf9e1a661420bf00c6e68db691394399e511ef177614ebd9bd74ae3480634f2e73b5f533f874fd4ff74f93b71cca3237ca55317e7a34f8fef22e24177b709e0b3ebd969da15e0b3ea3a27211699d817f7ddcbf89ef387cd17c0cf160f764fd3f4db8464089ede22dac2bafcdbcf26b206091bde5cb8ed329bd9d74dad7b64254888376cc9ab769f44bf2b6650dc03b51afe97321fbb61560a4e555fcdcbf1356f3a099f68a0a5ce907ae6fe212384e407f0ce4573bd24f736ddc47d8b09ac2d1a4d314d57a401fe115123eb8789a04875798da67576d11c1ba95e6fd0138e71a166e805fd68d98ef2915667894d5e5169898365af8b9e7e5379dc863e3d6c4f9eaf662a87069d825483a08fc06483f3cc0f8a0040c8e7fc8cc295373157816604a544ed2dd54b176b8aabbd6f073effdeefa8660618d147bcbad9a514396db4d7217dc8fce57f1a2900a87d61eae6da5d33562b0ba41ce8b3b9de51dea2a4ab92e0a6a1ea304b24be47259609c744a1137cd733dca53b793a5018bdc5932b573959b4ff0a457a948aa20e6a4c254fb1a1e40634136042df3405492ef94fb9fb843a73e1fe6bff9feaaf7a3f8bf1dccbc822b2429681396b8b9a67d040a43a66733fae52524b83bba6904c88cdd8a7e8d83bae12ff997ef1a639a2889a2c6db9a5b37bbaefe0b49995e1bb2642c8091c0cd6ca70d47c07ff43a52e65b15b656e4ca978d7c49f021a46a179a731b8897c29f6122c73881edd44af41683666f898d2547560cf518c16061c533a5bc956d9be79bfc90a7634f408ff4d87d2c98b891886bee4d75fd64c66d5f7d0b8db479e847ad6174435b677c815050f831ec8a4d43ed9c77d07a429471c95376572ec430cb1e21e0338fdd70c093a7d9c4eca3be", 0x1000}], 0x7, &(0x7f0000003680)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}, 0x800) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000003740)=0x3, 0x4) r6 = timerfd_create(0x8, 0x800) r7 = dup2(r6, r0) r8 = syz_open_dev$evdev(&(0x7f0000003780), 0x100000000, 0x80000) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f00000039c0), 0x300, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003c00), 0x81, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003c80)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x6, &(0x7f0000003d40)=[&(0x7f0000003800)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f00000037c0)="49dd178a83cf58b765146bee7fb4178f2340d7846166633118a4aa87a2a935f89363f7d5f0aeeec94f98638f81b1f04a0dde5a3c96b4", 0x36, 0x18, 0x0, 0x0, r2}, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x5, 0x81, r3, &(0x7f0000003840)="f56d6d5211ae502abfc5e7075ce39b6336c360e151ae63dea955d2de1c80afb6894d564171294b45e3f2a8054f420fbec53c68ef6d8e0e8419f1ff35e505961b7b6a974db3ea92b94c8d62fac6436e5c7d8bfc3e82d8", 0x56, 0xfff, 0x0, 0x2}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x2, 0x7f4, r6, &(0x7f0000003900)="260021d4320aae75e864fcf510a7ce95e7e8063502cedee5446f45cd6babe8f9a348e184095d408d193d82a1f53e3afd47743bbc801555cc909f099432e8965b31c1ee3e765f1216e623add7adf0fd59af8690cb44ae5c642e20ad3f3c3aca2bcfd6d412828b53cd94493eced58b6cdef678e33035f871c69d0f114e54f8055218e1aeacbac49f3998a8acf0b56f647df0b17542949d348ccb3c508223a8f578e7b83c0fd729004db2fd", 0xaa, 0x6, 0x0, 0x2, r9}, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003a40)="f9962f054573fda89a035f5e8db1ceda8818b1b76a208af9199a438893c038f7f6d7429bcf49210cb2361289033f47c1f1287fea089ac948e155630f7a6e088f3dc0e1b36695c3e855b9fda57dc11ffd17eb59d52cb1c0bd1106215ff9b75c519f9702557812b22579dbfec2e6eb7ff69b96abad042b5e62ef46a106d51db33ebe09940b0a72221a34a61685f13fcca259a4b5a042c31caf87870b6484aaab73e981eeb4927dd87df4ca92c1337ee09d465b2c6c838821709813c026b21eedaf38cf308cf4c6e454e28ee63f25d7360134e4e51a7ee627d5828ba73bb981ffa247b7be44b5aa01fc9e7ae5b6ced753505a2a1f", 0xf3, 0x6, 0x0, 0x2, r7}, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x3, 0x1000, r6, &(0x7f0000003b80)="42f9f0e8913b6a6a5f1b49cae0cbf7b7c4374949854d37486be6152d13b5b8855599c105832ae0950df98cb4ba47163a69a696ea72278a74cc451fe2514a4f7f4114d93faafa566e32b2c35717a5321e6047a0b502a7b01a0889e84d18bec0", 0x5f, 0x23, 0x0, 0x7, r10}, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x1, r11, &(0x7f0000003cc0)="b1daf1133a74e0e88ec31de9327843c3c8b54a10af0f72d33d98429a86e5c02ee6a44c741f273d43", 0x28, 0xfa, 0x0, 0x3, r7}]) [ 778.666585] 9pnet_fd: Insufficient options for proto=fd 23:26:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2}, {}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:26:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x126, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:32 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:26:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x810000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 9) 23:26:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') preadv(r0, &(0x7f0000001800)=[{&(0x7f0000001400)=""/228, 0xe4}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/252, 0xfc}, {&(0x7f0000000100)}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/196, 0xc4}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x7, 0x1, 0x4) 23:26:32 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:32 executing program 6: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x2, 0x3}, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0x193) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r7 = getpid() r8 = pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}, {@version_u}, {@access_client}, {@cache_none}, {@privport}, {@debug={'debug', 0x3d, 0xac}}]}}) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [{0x2, 0x4, r1}, {0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x7, r3}, {0x2, 0x0, r4}, {0x2, 0x0, r5}], {0x4, 0x4}, [{0x8, 0x6, r6}, {0x8, 0x0, 0xee00}], {0x10, 0xb}, {0x20, 0x2}}, 0x64, 0x2) rmdir(&(0x7f00000003c0)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x6) [ 788.821875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.832262] FAULT_INJECTION: forcing a failure. [ 788.832262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.834015] CPU: 1 UID: 0 PID: 7492 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 788.834045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 788.834058] Call Trace: [ 788.834067] [ 788.834077] dump_stack_lvl+0xfa/0x120 [ 788.834127] should_fail_ex+0x4d7/0x5e0 [ 788.834180] strncpy_from_user+0x3b/0x2f0 [ 788.834227] getname_flags.part.0+0x8d/0x540 [ 788.834270] getname_flags+0x95/0xe0 [ 788.834311] user_path_at+0x27/0x90 [ 788.834354] __x64_sys_mount+0x1e9/0x300 [ 788.834398] ? __pfx___x64_sys_mount+0x10/0x10 [ 788.834472] do_syscall_64+0xbf/0x360 [ 788.834504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.834528] RIP: 0033:0x7f163cc09b19 [ 788.834546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.834567] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 788.834588] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 788.834602] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 788.834616] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 788.834629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.834642] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 788.834718] [ 788.881233] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 788.884390] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 788.894653] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 788.898491] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:26:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:32 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 10) 23:26:33 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x163, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:33 executing program 6: open_tree(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0x3040002, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x1}) 23:26:33 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {0xffffffffffffffff, 0x80}, {r0}, {}], 0x9, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:26:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 789.111501] FAULT_INJECTION: forcing a failure. [ 789.111501] name failslab, interval 1, probability 0, space 0, times 0 [ 789.113277] CPU: 1 UID: 0 PID: 7514 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 789.113306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 789.113319] Call Trace: [ 789.113328] [ 789.113338] dump_stack_lvl+0xfa/0x120 [ 789.113389] should_fail_ex+0x4d7/0x5e0 [ 789.113442] should_failslab+0xc2/0x120 [ 789.113469] __kmalloc_cache_noprof+0x6a/0x3e0 [ 789.113499] ? __get_fs_type+0xe6/0x160 [ 789.113523] ? lock_release+0xc8/0x290 [ 789.113548] ? alloc_fs_context+0x58/0x9e0 [ 789.113598] alloc_fs_context+0x58/0x9e0 [ 789.113656] path_mount+0xab9/0x1d70 [ 789.113709] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 789.113759] ? __pfx_path_mount+0x10/0x10 [ 789.113801] ? kmem_cache_free+0x2a1/0x460 [ 789.113836] ? putname.part.0+0x11b/0x160 [ 789.113868] ? getname_flags.part.0+0x1c6/0x540 [ 789.113912] ? putname.part.0+0x11b/0x160 [ 789.113957] __x64_sys_mount+0x27b/0x300 [ 789.114001] ? __pfx___x64_sys_mount+0x10/0x10 [ 789.114074] do_syscall_64+0xbf/0x360 [ 789.114106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.114129] RIP: 0033:0x7f163cc09b19 [ 789.114147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.114168] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 789.114190] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 789.114204] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 789.114218] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 789.114231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 789.114244] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 789.114311] 23:26:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:33 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 789.236192] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 789.243017] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 789.262548] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 789.268480] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 789.328949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:26:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x3, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 11) 23:26:44 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x7f, 0x1, 0xff, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000100)="38040840b936c12b93044d46708f1df54b4ee2b1e7cac08e43719ebaea2af3ff640228360c2f387324209b0b011c01d992f367483cfa3195080c464dfe29fd8dbfff3e9e725dedda76c6beb10fc88aaced8046b77e680500e33b135d4b809cc8b6f903928e118e44e4a50c1fe27f188ee1c1831539868b708150162df479df41c65d047f5856c21b08f5c531efba3f38ab2acf3873155f2145118db2a5015caf13d07c0bb497dac58cbf995f0611580c70b0c43faf6fd226f4455bffa24537a6074adbb97f03e8688ab0987efee0ef96f741595579e8de32cc9bf0", 0xdb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = clone3(0x0, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ef, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:26:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:44 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:26:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 800.697450] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 800.701993] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 800.711187] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 800.715197] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:26:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 800.765207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.777466] 9pnet_fd: Insufficient options for proto=fd 23:26:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x5, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 12) [ 800.863817] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 800.864936] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 800.890191] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 800.892906] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 800.950943] FAULT_INJECTION: forcing a failure. [ 800.950943] name failslab, interval 1, probability 0, space 0, times 0 [ 800.952764] CPU: 0 UID: 0 PID: 7564 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 800.952794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 800.952807] Call Trace: [ 800.952816] [ 800.952826] dump_stack_lvl+0xfa/0x120 [ 800.952880] should_fail_ex+0x4d7/0x5e0 [ 800.952933] should_failslab+0xc2/0x120 [ 800.952960] __kmalloc_cache_noprof+0x6a/0x3e0 [ 800.952999] ? lockdep_init_map_type+0x4b/0x240 [ 800.953027] ? legacy_init_fs_context+0x44/0xe0 [ 800.953079] legacy_init_fs_context+0x44/0xe0 [ 800.953113] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 800.953146] alloc_fs_context+0x570/0x9e0 [ 800.953203] path_mount+0xab9/0x1d70 [ 800.953250] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 800.953300] ? __pfx_path_mount+0x10/0x10 [ 800.953341] ? kmem_cache_free+0x2a1/0x460 [ 800.953390] ? putname.part.0+0x11b/0x160 [ 800.953422] ? getname_flags.part.0+0x1c6/0x540 [ 800.953462] ? putname.part.0+0x11b/0x160 [ 800.953507] __x64_sys_mount+0x27b/0x300 [ 800.953551] ? __pfx___x64_sys_mount+0x10/0x10 [ 800.953624] do_syscall_64+0xbf/0x360 [ 800.953657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.953687] RIP: 0033:0x7f163cc09b19 [ 800.953705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.953726] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 800.953747] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 800.953762] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 800.953775] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 800.953789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 800.953802] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 800.953870] 23:26:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:57 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:26:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x6, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:57 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x2) io_setup(0xff, &(0x7f0000000080)=0x0) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x5, 0xbb, 0x5, 0x8, 0x0, 0x8, 0x2100, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc465, 0x1, @perf_config_ext={0x60e2, 0x7}, 0x0, 0xb60000000, 0x10000, 0x8, 0xfffffffffffffffc, 0x8, 0x8001, 0x0, 0xf8, 0x0, 0x27}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x2}, &(0x7f0000000180)) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r8 = getpid() r9 = pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="6cc4660686ecf2cffdf1deecdfa71bf36318a13f06a74aa5b14dd802cfa5fa36abe6409e220424c8e0cd81523d48e597f28195a111fb7ec31f25017e68a7395432d4b9ce"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x113002, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r13 = getpid() r14 = pidfd_open(r13, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r14}}) io_submit(r1, 0x7, &(0x7f0000002700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x8, r3, &(0x7f0000000340)="78bcca37e11a9309fab14366275fb3c469", 0x11, 0x6, 0x0, 0x79676603fdc81f67, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x3, r9, &(0x7f00000003c0)="2f07120f645274696071646b0b8df819bcfbf4321728aa83ef0e9a77a98390d3d90128641c26b9fc0645067cb411c6399da11bbe299a1352948a369a262e563d52bb4df1b33440f4d6520fa44db24c131ce3ef4ac1f0ce8ced7939eb5287a3ded35087", 0x63, 0x3, 0x0, 0x0, r10}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000500)="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", 0x1000, 0x7, 0x0, 0x2}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0xe, 0x8, r3, &(0x7f0000001540)="8af04d382a4d39dd578ade0a42b0cd80e7371a136f5d6e35b23ddb6328e6bed40e5102b36bf3305747ac9d5d0a9b474a72b0c0bf692ec3c5ac4e331ac293003d94057d0550a79483043aee82887176ef2a7df4ac49d977803ed8de56fed1d465d57db834f5c584ba4e9b95c76ca3201a52e4f7904de90ebaba8aab2696bcea7d3fd3a9b69b51d2a14ea14d2529f0576eb2c9346e240deec6f0b98454f5716f9d7d7b4b3de2d1da0d99c11758928738c59f70aaf65d0eb380f2cc3bc23b38f555aa9136a355c6fc8c3e05de38a0a3fcf9533ed3f9772189703617daf60a5c7adc80700835421e34a8967ab891b09a5d73413ea410fbe402cb3564b366edb1fb5b5791afad8a269c9ffee8dc01cfc6e3e7c0160f9daeba46ccc12215ad16c6d780b0ec260b5ea89a10a840a8ac83e59a300fab3ecbc6eef5b871fd9985a83813560cf8f553b038aad08bc99c8a5f3354334e0f95f5f1920ded390593b6064809903087a0c8ecf486361f85ae4422cc860fdeaafa713ccfd387c5f4721d3ddce070f4383e01091f254e5c800629ec13b292a68816059154648a3349ea17ee2340ffec34464f68185f82ba350645bc57f6ed4cba0c5a35a22ba3776d26f62ee2c8a7b6e2dc8d5d48dbe4c52b20efe538f9928b8336128355af08fc572096af2ea7e11ea46d989e10d42d8bf5a7c6f42cad9944f30f85a71e94f08fb2423b51c8c6d6b7b92eb3188f49dd9fe9408269a29eeec96562c22250dfc90b327119fd78c2215dc2de027d84acf8fe7d7345043dd1f852a0264e80d002817c0a139e4d38be24954d08dadab0c24bce8456c3d80efb40aecbb3e4a325ba12b70835246d6de7df239c48c0422b7064771710d666d3c8f1c74b9a10255a293874fae8d62be1a19460e05d66646d271b3363527db884265320b4f8a730cde4d19c909ac8bcec504798248e66ad25d869c521cb728865136a7ce1e09029e0989d5b998b051691bccb6a04ef021fb95c7a3f0d34939a4ffc1a8bae7329776c03966f7152b6acd0b53865343ad26455f7fea9497c4987079d5aaa521292a58dd6c5e70f4a9d3864ca2b149030f156812c2db2a70ad4c28a8d654662af8cc1cb0f3ba9dbac7cbb5ef84980ff08b7881edc1dcee96a12bdfa72155f30bc552407f4e310d9737ea27e1a51695ad5696db57899fb359cc439aaac00633a5e03bedc7cf8b082eb4375d36a52d25d793e0a3fc4b8fa940a05eb5155a8f6323af67b89f831868cc5269c3d5379deee56f9b8c06ad2781ca76cbcc512b0409eac23545a269819cde8fbb6cbdb334b1608a8e0da9d709a391afafc111f9f572d1a80f9ba13116e59d8d1ba92f644f11da9cc85af17b82209ddaed29da09a7665752cd2f341226fb22b726f7bc0f053cab07d489cba6016769b3eca5e635cc17c3acc27c8e02a4793616b6dc7068a8ef0a27bab040f91faee5407f42f5117e521eb65938225a49ad89d39b78b31444822f00cd49db0d567caca92b4b4f183ccb6118b0d3826d974ee801a4064db90bacdc95b66f83580d8b7a068ab50185e4579df7d8701a5084b3e71ed8cff8164b991ed769208b91be1f00454e613c233b834209b8ee909cfeb6cad077ead72b26ad435b87a2781f6aefad2c9646d36a51a043dd7c9bb41e7dc8cbbf4a47beaa8fd487986d416a6f41d6f91c00ab10c8afffffaabcd9aed5579d05d8867e3f0433c9fed5cab691f8a297f2f3ea48384be908c2dcf27aee78bb30be008907332007bd4cbd999f90e7585c22fe3f796cee1a54b71e04a2d6d57f0b13e572b1ba5fb8050e3e8f2ff31a54c1306e9d18132836b6f81cb5b43a16b2a86f46b98b1fbbc1bd5230a1ff0fc65b1cf6b3788b3a5bdf3bc4c6779d8332047b98076626aed57b8078976e10436cf22f0380721debf85e3cd606ee83dbd1d8f2255d8cc757b2cef756a36ffb32f57af561233781965c8c6681eae42a24363f78d6dc0b3de5c4233c0eca8b96a07d8b9557f6a02f0c3d2e2262a59c06f0b92d0227975487ebfa000f06daa8c41543d1c7850f59f517b4de25b4b3762500e567708b306947404dee8783d05ea9153e8e983d648d9bd8ce775769568e6a39aa617eea5cb7cf8fd62ace685e68f918060a85a779dcea223739f27f82034bf9127426dbde5afd2ca1af7adf452bbe89e07900aab3a684bbafc299ad0dca20511a0fe24e4c17cc7c524a0153c067b73fcc4750834c609384b71229101f5fd61126c17dc41dbb248a4f987a339950333384996e2f84bd5c6c6aed3f2d3b03ec12e7e63835ca6cf28684d7686480b73f8ceb70be42949071e8d614edadbfeb82557c9304d8fc9bfa95eaeebb775f24cf378ab2dc11f2275a46229f9444cf9e1e0437cc73970bfcfdd817e9fab829051f5f0e34a708a24c560dd0419e06df5ab324aa07b8d66dcf520b534dfcfd2de3f1c6cf0477b5d9a1956a8bc130814cbeff4613e55978b54f64c6ff6bcaa2f1090679a49a1e9b80a38b29d1866e9be4fa1d1785dec644e1c18b84b21bb18adcc37dab4af97d42ec797bc5dc919f258c1eda93e18d8ed93131e598ef79c16f77b45c28f3a1f2d628945008555b1cee463b562feafcf5511c53a3b38c646ed6b9aee0cd6972e47c0387280294a44f98484c2708a29fbd53a24667ac247ffb6dbc6b070677b916a6d2d2702abd3bdf852a44f1463f93dff4fc1fb02dba83671e5fbeeb58a09999c85177d6467516a371eeecb7f13bf65ae38828d62fc1a3082ba2efe18b0666dff41929e8e63644bff1a6acd0e137f069f48579a418dcd7a84166da9db8af9f68dc1dff65be87b9dfd7e14808380637eb53c11787699db7c00b1ce36f6cc1b94d4028d45b91e521de603ef809bfa6a6b1a5e0088f8539e08d4934a90f60e95d63d59ee6d94062d7d0750101d45302bb84bdac33c9b9a454256f843534192279caf366cd0ab41046e327fdd1fe069a729c5f9df814362313c37b474f436c2a70946f3df675daed8ee3e0e9f5a80341905eb2d700b3c9a21f8384c406c61781b33a610a3702177ebe2cf937ecbc111669f752beaf4ec274ce9f9fecd174bd9d80272c658fa4674fd3a3867e35c0021a2e6db783760225eeff5a4cc212203c9aaa25dfa0d495311cf0d0432f9f02d9613eac9a610ba06dcd9eb930a8d629cc61f6330e9507627a3dba75582ce9301a4bb47865780885409d33312f0cb07f92ead259dd7b1b6da9f9220c9fa92ae7a7293540594d26bc637bdfea07755e5707f44daf63e246066fc6d7e76ca3f7ddb9689233d1a4f0e22c8e6fd4fe6902c8a3678a716e5f41ae458ae4d5621e737b480e7be27032cb83fa2feae9d430f45ba290a90e1cf31911f5cc91bfa8656456d94af0b58630c98b37f6af09b0b45790f30cced34b3c42c6805b41350fa39e9ab795109c7ba2ffdfe181402da4bd9405bfc319402ff71ea7a42d81ace5cb42f16faa82e13370094330dbaeba5d356ef32984fe9a714eab8896da3e879288f92ac2dc47fdd8260880b9b1086e8cae26957a8277e58f6cd1266da99d13d385aa2c696041eb3f2e45251d0da4d8c5070831d0a3e57cc9ed5e5f0a6740b5101bb4a1ab9935c5d206413b2f4cf14daf7f8aa5fe0df9396973260ce2b83bd180a4564f8f085e3234ed866ed3376f194e4731a07d58d16e41c10aaf79e66e37c646713aceeb42de4275d6ab3c0d5affe2458de03cf14bbc1b548e6d792bfe5b28dc3ab3f259524efe15829e5bd649eae45174c53026aec6546d0a09fe1fd7241ab298aaa3be817c8f7ef60c7ae480a0b944d7a7bd215003f338ada3e02874681b76ab9a90226f78de181b44dac7e10cf4251eaf2be04ef21f29f5e430bfbf8f9442ed7234b9e3b16171f2653aa65dc34ba95f00bc8606b8f80f281fff67edf196695a47bbe479da943ebba3ab2c392d00a50a57b9e9977e50cec2bc74f0a12b46fac71a4bff119d004fef744df9b18d77323bf14c55bf1566b69b8258202d347d4e7264073cba939a652383da81617c7a66de22a1754b6cc73c4000ac9dbcb74637774bfc21c136e65a565b3cbd178d4476b60425a14510595dd380945e09eaa91d3d25197241a5093210f1e9490605c0773342b83008c621442bf26523cdb68eec2f2e3dc25a706b454f36985de4d58d1d8b3c023e3fffcbc12d4b875fc9e2cf3cb02fa63913d046cecca7c3db1248991fd25e2b39307c7be73a01016c779972588be7ea2ca5c522d8b53deaefc97033ebe3d07ef39d2efdb43882c07beb6d66ea3406a5cd12825bf7df19a13f9582bf2a6f0a1ac524a9c1b2d65fc12cd91ef843a66a024ccacafe5a01f38813aafe50b5fdf09f4a9982dbabc8864e7c815416706d0ecd9443973b7f375543508ea9d2a3e3fce68f1249f06b9b813d77a534f224833792f3607a8b1c616d0e416671ce5e6957ffd1ae8b2434b950c28d6237a90928619d5b7717269a9902dd95abb96a33b32b3302abab182f4f03aa151a86aa26b6b25b06723da3b7b30f29c43d1bfdb09cac870f30ac4175e4c92cf695bb1bfe585a27450c7265a26c5948e25fbc384d1cfd20f1f52f34c53c45c3c2263b24d3d3d4a77d783e91fe8585e75b475bfaf71dbc1e98f2fa222ce2a34db203d432cc96979f00701cadf3b0a367412ca4a24e81f13805d105bb099bcf4215a7a1095ac50f3c7a3df2b1dd07b117b239cd4416f2d24a413ee9f4f44e42a347933f413e2832ba830bfaf4de10f32cac3fdd0d75811984d44d4b96639f36cd215225033cfb9fd16059b678bc1f36ad76a4a5e9fc7c4d112a71c1394dc8d65daf7cad7c9568b557017eaedb03a8f75a740ae969d4fa74b75c70ddcdc22ce122faca28f7ec97ca57eda636103bb319850b8194ed8859683796634979f3b85f9cd68b734374fc88ce4846270697c121763483da31d1f27dfb6c6555d0493300a752ccf8c97562266f7296fe5145b7158ed9c7e6b258268c04a043a972bdf0eaa9a511d6481a254b8e69196e4f71637af1329780f1be08a8c5def03bddcb3f48033133ebd1626e383a5bd617c487b15faa546e30c0dbb8f0386cf6a9e9fbee092d9f5bac15c00eecfee00651c2aa2229227cb7d71b351e973647a1f9bf2d50d17f1809a6b7318c26e69756a933757d307652b4015f72470665060a2b695f1bd0638685acf990667e89ebf5602b4b4150e9f8adcd536a86080fe0944a4a9389f763dbd82159c6d3c8090ae3bc4cf5276041b1a4acdcebe97e496a37a691bbccf0912a4083c970bfec5b9810fe65eb50c690f35859c1bcccfc6a7cd36a5bbfe893aee87c2cd36a339fd962839bf0794c1096530c372c7c9095390b1daf2d9059613aa950721d691a719286ede75135cd2abee6b11f86d4c6ac5acf055ad4344a806196fdb38f4a183ffdd25155ee4a24882a52ed7c28ee6f8f2a2f8b0aecf0cd8521c09f931494a0507db0ab98a86f71d56474eb46a3338c1d75e1ea388ea55d6feb2640eaa3b1ccbd97a6545fed6fc0c8229bbcbbe54932b42cb7ad11a2df44bf561e03bd6c1471838092f8cc0861003392ad43d9b3ec62a0cfb8d5ea64698df4988d37ef0b8b9d408b0beb89285b96b693a3b8d5a6eae058ac56567a1fec3be491a3d6a7e9c87bcade9310a052b0f27a6735d02a8035cdd106cd695a4c2eb1ae660da0c4ef3a62140dd91bae7e04a73307b9c1d5f1ddeefaec5a40516e1d6a7f0b607c0423b446e882df413dead0b9de6ccc4e4dfa66c1421805d067db19855a014a5a0484836d94e4a0e61be2a555b0c4e56", 0x1000, 0x80000000, 0x0, 0x1}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000002580)="68f5029a9e2105ea282b732a8bc5a929c87e2322b2cb7d40966779e1e53716d1002df71a9643eef13c45ed4991504b9e0774ce2b7e67a3dc2fe595999b2c96190c61a98948692a061506453142a12c3883d059ab6893d15ce9d4a60172311d6f002ff99ff9d2ca24745a5362a20dee0c0d8ce8a0f6e9155f0fcd2c9bae6b447cd0c3d84a58d8fab9703db043f753271f492236641f80c1b1eefdb2bacc5a5e7f5c0069d56858da", 0xa7, 0x9, 0x0, 0x3}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x5, 0xff, r12, &(0x7f0000002680)="d586468fc9e893ec801d", 0xa, 0x2, 0x0, 0x2}]) 23:26:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:26:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 13) [ 813.578254] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 813.588480] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 813.588822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.615625] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 813.623830] 9pnet_fd: Insufficient options for proto=fd [ 813.627086] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:26:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:26:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:26:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x890c, 0x0) sendmmsg$inet6(r0, &(0x7f0000004440)=[{{&(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="d711e600c934fae9175525900a473fdaf33b4d0374a87d0000000000000000000000000000000009adcc3c17fc268f0d6c9a65fa90b7d0fa6227366b34bbd9ffd22237e43ff4a513e5c3f4a9e4fabdb9571e429e9fa7636ba4a25e176e02794eaeb182b8bbf95120cafc4f8c5fe44c6bdfa55ac2f8999b847553ae5920f10aa9e86e31d9ac842302455cbad4ce73140b25bc67eb13054fb1d8729f717ba1ff6df3f7bcb591afdc601e", 0xa9}, {&(0x7f0000000780)="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", 0xf57}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}, &(0x7f0000000480)=0x40) 23:26:57 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x7, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:26:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 14) [ 813.810327] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:26:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 813.819983] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 813.842244] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:26:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 813.857961] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 813.874334] FAULT_INJECTION: forcing a failure. [ 813.874334] name failslab, interval 1, probability 0, space 0, times 0 [ 813.876420] CPU: 0 UID: 0 PID: 7600 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 813.876450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 813.876463] Call Trace: [ 813.876471] [ 813.876482] dump_stack_lvl+0xfa/0x120 [ 813.876533] should_fail_ex+0x4d7/0x5e0 [ 813.876586] should_failslab+0xc2/0x120 [ 813.876612] __kmalloc_cache_noprof+0x6a/0x3e0 [ 813.876643] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 813.876682] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 813.876706] ? v9fs_mount+0x9d/0x9e0 [ 813.876759] v9fs_mount+0x9d/0x9e0 [ 813.876799] ? __pfx_v9fs_mount+0x10/0x10 [ 813.876844] ? cap_capable+0xdb/0x3b0 [ 813.876881] ? __pfx_v9fs_mount+0x10/0x10 [ 813.876919] legacy_get_tree+0x109/0x220 [ 813.876964] vfs_get_tree+0x93/0x340 [ 813.877002] path_mount+0x122f/0x1d70 [ 813.877049] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 813.877100] ? __pfx_path_mount+0x10/0x10 [ 813.877142] ? kmem_cache_free+0x2a1/0x460 [ 813.877179] ? putname.part.0+0x11b/0x160 [ 813.877210] ? getname_flags.part.0+0x1c6/0x540 [ 813.877250] ? putname.part.0+0x11b/0x160 [ 813.877296] __x64_sys_mount+0x27b/0x300 [ 813.877340] ? __pfx___x64_sys_mount+0x10/0x10 [ 813.877415] do_syscall_64+0xbf/0x360 [ 813.877447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.877471] RIP: 0033:0x7f163cc09b19 [ 813.877489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.877510] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 813.877531] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 813.877559] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 813.877572] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 813.877586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 813.877601] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 813.877671] 23:26:57 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1fa00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x10000}, 0x4000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) syncfs(r1) flock(r0, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, 0x12, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 23:27:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:27:08 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:27:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x8, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x4000000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 15) 23:27:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:27:08 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local, {[@lsrr={0x83, 0x7, 0x6f, [@remote]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) syz_emit_ethernet(0xc3, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x9100, 0x2, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x22, 0x4, 0x2, 0x3e, 0xad, 0x66, 0x0, 0x80, 0x11, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x4, 0xa3, 0x1, 0x9}, @timestamp_prespec={0x44, 0x3c, 0x32, 0x3, 0x1, [{@rand_addr=0x64010101, 0x80000001}, {@empty, 0xfffffff7}, {@loopback, 0xfffe}, {@remote, 0x81}, {@private=0xa010102, 0xffff}, {@multicast2, 0x8}, {@local, 0x80}]}, @cipso={0x86, 0x29, 0x2, [{0x7, 0x6, "30c7c806"}, {0x0, 0xd, "10902e21d73d92fa4694c4"}, {0x0, 0xd, "909e31864c43d69c7069cb"}, {0x5, 0x5, "32e3bf"}]}]}}, {0x4e21, 0x4e22, 0x25, 0x0, @opaque="749f11c394926775d5792c32f98716f9fc29b9744aa4a77c7a74cec9d6"}}}}}, &(0x7f0000000200)={0x1, 0x3, [0x305, 0x28c, 0x349, 0xca0]}) syz_emit_ethernet(0x58, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @random="8f8e68e0a654", @void, {@x25={0x805, {0x2, 0x26, 0x27, "dd60ee291683192ba6032148c044ed79e34f3237cfc148df56234132688e53fe07c2842f9df9bc4aa05b62468d128f2365662fd3a8082664325f05ca5fa559fa716afbab4f024f"}}}}, &(0x7f0000000380)={0x1, 0x4, [0x8a, 0xa4c, 0x86a, 0xdc3]}) syz_emit_ethernet(0x54, &(0x7f0000000240)={@random="759106d5f548", @remote, @void, {@generic={0x8809, "c3bd2cc229063feeba7cc8df51b439e31027f6a2651b30aa5fde1798551f0319c866f7547993f71d200c734ca5d653846ad8dca15993237f6a6e4f95bb42e96ef9a4a3c9fa35"}}}, &(0x7f00000002c0)={0x0, 0x4, [0x111, 0xa69, 0xfbd, 0x513]}) 23:27:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 824.639086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.653292] 9pnet_fd: Insufficient options for proto=fd [ 824.674345] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 824.682267] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 16) 23:27:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x9, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:27:08 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) clock_gettime(0x0, &(0x7f0000006f00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/67, 0x43}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x7, &(0x7f0000002580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002680)=@abs, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000002700)=""/102, 0x66}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/64, 0x40}, {&(0x7f00000047c0)=""/60, 0x3c}, {&(0x7f0000004800)=""/149, 0x95}, {&(0x7f00000048c0)=""/60, 0x3c}, {&(0x7f0000004900)=""/191, 0xbf}, {&(0x7f00000049c0)}], 0xa, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004c00)=""/198, 0xc6}], 0x1}}, {{&(0x7f0000004d40)=@abs, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004dc0)}, {&(0x7f0000004e00)=""/24, 0x18}, {&(0x7f0000004e40)=""/178, 0xb2}], 0x3, &(0x7f0000004f40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000005000)=@abs, 0x6e, &(0x7f0000005180)=[{&(0x7f0000005080)=""/70, 0x46}, {&(0x7f0000005100)=""/114, 0x72}], 0x2}}, {{&(0x7f00000051c0), 0x6e, &(0x7f0000005700)=[{&(0x7f0000005240)=""/125, 0x7d}, {&(0x7f00000052c0)=""/84, 0x54}, {&(0x7f0000005340)=""/177, 0xb1}, {&(0x7f0000005400)=""/163, 0xa3}, {&(0x7f00000054c0)=""/195, 0xc3}, {&(0x7f00000055c0)=""/102, 0x66}, {&(0x7f0000005640)=""/163, 0xa3}], 0x7, &(0x7f0000007900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000005840)=@abs, 0x6e, &(0x7f00000058c0), 0x0, &(0x7f0000005900)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000005980), 0x6e, &(0x7f0000006bc0)=[{&(0x7f0000005a00)=""/186, 0xba}, {&(0x7f0000005ac0)=""/234, 0xea}, {&(0x7f0000005bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000007a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x8, 0x0, &(0x7f0000006f40)={r2, r3+60000000}) r5 = syz_open_dev$vcsn(&(0x7f0000006fc0), 0x9, 0x8040) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = getpid() r8 = pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = syz_open_dev$evdev(&(0x7f0000007200), 0x4, 0x100) r10 = accept4$unix(0xffffffffffffffff, &(0x7f00000072c0)=@abs, &(0x7f0000007340)=0x6e, 0x80000) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r12 = getpid() r13 = pidfd_open(r12, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r13}}) r14 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000075c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000007800)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) io_submit(0x0, 0xa, &(0x7f0000007880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000080)="3c9d3e9bd7cc9cab78ee02c7a786af45", 0x10, 0x7, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x3cb, 0xffffffffffffffff, &(0x7f0000000180)="fe35233135e107cf3e530fb19d87b911975df09b7bdcaf039a3645cf98130677a960e46e", 0x24, 0x80, 0x0, 0x1, r0}, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x8, r4, &(0x7f0000006f80)="358f27def0c8916b01a546e2c7cb61ced090e123872fde37db367b8fb18a9c387cd9387196", 0x25, 0x0, 0x0, 0x3, r5}, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x7, 0x9, r8, &(0x7f0000007040)="7f28f7a34fbc8b4acda18d0e2140df97504834fef166b48225dba824d47aa9b8425d48e862609a5005dcb0c111f07080c146ed", 0x33, 0x1, 0x0, 0x0, r0}, &(0x7f00000071c0)={0x0, 0x0, 0x0, 0x3, 0xf001, 0xffffffffffffffff, &(0x7f00000070c0)="7630d0df514669d117f6f4ee3142b409a91ea3cac671eba652d86ddc75435e29b6411ef3d4c055dee71695c6ab784a6d1abea52597c759dc5b83e43ada7761d698251f1a8c8e4c9278e48dd08c31bc4114348792a1a210633010177fd11b909a618bdaa626cdf4988f291de8a00bc375874b3398d40d38af028964e7938529a30f9b8fb9f69edd60aead194d88a9d20dd95c48ecc61765d0a9848f8f6c7637bdefed877da0697d977727382c8976fcdfeb26c09c928adaf65a96434104f77bfd6cff83125c14a9fa7618cd0ee4c82bb8aad048dc9255fb865786eb01b029928dccbd7da9295fc72539a77954", 0xec, 0x39ce19b1, 0x0, 0x1, r0}, &(0x7f0000007280)={0x0, 0x0, 0x0, 0x6, 0x4, r9, &(0x7f0000007240)="48d798c0b78c92b245d616752cdd085b7884ae07065df8f1623f834d7c970ece45a3bf42", 0x24, 0x2, 0x0, 0x3, r0}, &(0x7f0000007440)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000007380)="cdab67244053dc9517f9d247d82f492c514dcd3319dbfa1953bbc5aa07e552cd98b230e478fd09679c41ff85f26a25ebbdabc1a74a438b2af43fdc3de4b8ab86640ce2d384611f1a0871eee7d750cab783e20de5d14a55064ecaa731edac1d69c105910b0bdee5291576e2f974e02342b170de18a375c66f2b736c2ec194b24e53f4245bbf66d3c815676ae65ae1cb4819c93024b5c5b00b69b246b5d260b87c5296b5c149800daa373211bd694374", 0xaf, 0x200, 0x0, 0x2}, &(0x7f0000007580)={0x0, 0x0, 0x0, 0x2, 0x200, r0, &(0x7f0000007480)="f4857676675981e6629afbfc98905a6759344238554aa01d4985271b9fd1e0c3d060c19a074ab6d5efdc0a5190a2ffb7b4b32d3d19ecd4677cdba535db9dbf4b973b2e8843584baaf5b6fea8cab0b6938da4c8281ba5abc05ebd7ae7c8a948550600b240737511f1f05a88ed71ca660a8ac22aa400a7de752e2a6531fb5b6e7b1c63dfab1293f70511ed13459520788216a21802fd609add5dbab9d9a80aa21a71a65a523408c04c6ea8a8e938665fb6e2d03515eb7c426e8ac6bf31973e097ef068b539fb2248285b3ed4d882b67173139a77f4b0bae6c80a998f6d004a5087752b6d7cc8580efe83cfa69c4d3e4f56688b3667ebadf0", 0xf7, 0xffff, 0x0, 0x2, r11}, &(0x7f0000007700)={0x0, 0x0, 0x0, 0x6, 0xfffe, r14, &(0x7f0000007600)="b21255aa46bb9c030e0e9ba6149dff241a1d0034d0e41c69f63c72c153dc1e9df63632f0b99f33cbc1d16acf12e2370599d364ca8d4f1a58d25b610563ac94e4c4e9bc409870d11203731ff240841efad0bec7c50d7d9579320b9c2600d0d285466029702a098f42f59cea585c89b7bf11e924f53894b2eea5050eaa68aa30f8622e9c96b4d16a78af98d7aa9a80664dbaec5f6de0b1cc6d0022cffd89d4c054d6cf793ff36105721919d56dc390f91e23728996faaa944eb01e104cec7455ae0a818571cb705d3ce959cd641672de37eae2a5ed078a10224b994db59942231d5cf06ea03e3299d79621a084736a3fd54ec62bf3", 0xf4, 0x0, 0x0, 0x1, r0}, &(0x7f0000007840)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000007740)="aa6e1a8d7e2aa1d0afbaf9832c313cc47df9a77a08b2321a2d13f599e5a78ba8f761679aaa4f51f41b9ed6993c7b1055d9df7d3c0f9f0b6b323a67bcdd54642fff9bcaf7a28ab14fa4f72ec79290045349358c2c3c799cebd6893d4f435122cd1b54268c46a85be5ca9d3eec8c8787e366fd46d47fbcdd21aed6ef71158ef3505cae468eca6ea23655a584aff7a349583ef34403df28f71b752ec774cd6a2cbdce396b5ea0981094ebb26f37cbcdfe80e9", 0xb1, 0x828, 0x0, 0x0, r15}]) 23:27:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 824.873359] FAULT_INJECTION: forcing a failure. [ 824.873359] name failslab, interval 1, probability 0, space 0, times 0 [ 824.875447] CPU: 0 UID: 0 PID: 7634 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 824.875477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 824.875489] Call Trace: [ 824.875498] [ 824.875508] dump_stack_lvl+0xfa/0x120 [ 824.875558] should_fail_ex+0x4d7/0x5e0 [ 824.875610] should_failslab+0xc2/0x120 [ 824.875636] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 824.875676] ? v9fs_mount+0x9d/0x9e0 [ 824.875709] ? legacy_get_tree+0x109/0x220 [ 824.875737] ? vfs_get_tree+0x93/0x340 [ 824.875764] ? path_mount+0x122f/0x1d70 [ 824.875798] ? __x64_sys_mount+0x27b/0x300 [ 824.875833] ? v9fs_session_init+0xaa/0x17a0 [ 824.875859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.875902] kstrdup+0x3e/0xc0 [ 824.875941] v9fs_session_init+0xaa/0x17a0 [ 824.875993] ? find_held_lock+0x2b/0x80 [ 824.876029] ? __create_object+0x59/0x80 [ 824.876063] ? __pfx_v9fs_session_init+0x10/0x10 [ 824.876095] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 824.876138] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 824.876176] ? __create_object+0x59/0x80 [ 824.876211] ? trace_kmalloc+0x1f/0xb0 [ 824.876233] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 824.876261] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 824.876317] v9fs_mount+0xbc/0x9e0 [ 824.876356] ? __pfx_v9fs_mount+0x10/0x10 [ 824.876400] ? cap_capable+0xdb/0x3b0 [ 824.876437] ? __pfx_v9fs_mount+0x10/0x10 [ 824.876474] legacy_get_tree+0x109/0x220 [ 824.876517] vfs_get_tree+0x93/0x340 [ 824.876554] path_mount+0x122f/0x1d70 [ 824.876598] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 824.876646] ? __pfx_path_mount+0x10/0x10 [ 824.876687] ? kmem_cache_free+0x2a1/0x460 [ 824.876722] ? putname.part.0+0x11b/0x160 [ 824.876753] ? getname_flags.part.0+0x1c6/0x540 [ 824.876793] ? putname.part.0+0x11b/0x160 [ 824.876838] __x64_sys_mount+0x27b/0x300 [ 824.876881] ? __pfx___x64_sys_mount+0x10/0x10 [ 824.876954] do_syscall_64+0xbf/0x360 [ 824.876986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.877008] RIP: 0033:0x7f163cc09b19 [ 824.877027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 824.877047] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 824.877069] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 824.877083] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 824.877097] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 824.877110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.877123] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 824.877190] [ 824.936814] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 824.942996] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 824.955913] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 824.957507] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:27:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:27:09 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xa, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 825.161794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.165402] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 825.180060] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 825.209767] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 825.213517] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:27:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xc, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:27:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 17) 23:27:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:27:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:19 executing program 6: memfd_create(&(0x7f0000000080)='(\x8b!\r\xbcA\xd3\t\x1f\xa0H\xa7\x97\xc9\x9a\xcf8\xe0\n\"\x1c\xe7RRz\xc1\x92t\x1eb\xeeYRM\xd7\xeez\xc6E\x9f//\xa1\xdb\x82.\xd9p\xe4\xff\x86\xe0\xe4yW\xd7\x06\xc0\x1c\xa1X^\xbfZ\xf5\'\xd1\xc5d\xa6DC\x99C\xd4\xc3\x9b\xced\xfe\x18\xe3\x1c\n\x9a\xdbfJ\xf64\xdc\xbf\xcd\x7fo\x8c\xcbQG\x87q\xa9u\x1c\xe4\xd4L\x1bB\xdb\xed\xec0\'\xd5oQ\x10W\x92\xe9\x83\xb4 \xd8\xe5!\x9b\xe0hJ\xa2\x87\xc6(\xf2p\x00'/217, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ftruncate(r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) [ 835.418880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:27:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 23:27:19 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x2}, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x0, 0x9, 0x4, 0x0, 0xffffffff, 0x20811, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xc4}, 0x1000, 0x40, 0x8, 0x9, 0x40, 0xc4cd, 0xfffa, 0x0, 0x9, 0x0, 0x100000000}, r0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b46b276a7c577e839d42e77186e91dd09adabcba20a68ea682646fbd862db887f53c944d9612e5073d86adea667d6dad4a5c239538617ef56e3573336ea5a6fac9e0f608f43c2eb6b10254188b8a81f34c4cd773111bc9251da7698aad11b972cc"]) [ 835.452431] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 835.461448] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 835.482497] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 835.491153] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 835.499991] 9pnet_fd: Insufficient options for proto=fd [ 835.502596] 9pnet_fd: Insufficient options for proto=fd 23:27:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 23:27:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xd, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 18) 23:27:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 835.642081] 9pnet_fd: Insufficient options for proto=fd [ 835.643427] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 835.656269] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 835.664616] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 835.675819] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 835.702626] FAULT_INJECTION: forcing a failure. [ 835.702626] name failslab, interval 1, probability 0, space 0, times 0 [ 835.704509] CPU: 0 UID: 0 PID: 7701 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 835.704542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 835.704555] Call Trace: [ 835.704565] [ 835.704576] dump_stack_lvl+0xfa/0x120 [ 835.704628] should_fail_ex+0x4d7/0x5e0 [ 835.704690] should_failslab+0xc2/0x120 [ 835.704718] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 835.704755] ? v9fs_mount+0x9d/0x9e0 [ 835.704789] ? legacy_get_tree+0x109/0x220 [ 835.704819] ? vfs_get_tree+0x93/0x340 [ 835.704851] ? __x64_sys_mount+0x220/0x300 [ 835.704889] ? v9fs_session_init+0xeb/0x17a0 [ 835.704942] kstrdup+0x3e/0xc0 [ 835.704984] v9fs_session_init+0xeb/0x17a0 [ 835.705040] ? find_held_lock+0x2b/0x80 [ 835.705079] ? __create_object+0x59/0x80 [ 835.705115] ? __pfx_v9fs_session_init+0x10/0x10 [ 835.705149] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 835.705196] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 835.705236] ? __create_object+0x59/0x80 [ 835.705274] ? trace_kmalloc+0x1f/0xb0 [ 835.705298] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 835.705327] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 835.705389] v9fs_mount+0xbc/0x9e0 [ 835.705431] ? __pfx_v9fs_mount+0x10/0x10 [ 835.705479] ? cap_capable+0xdb/0x3b0 [ 835.705518] ? __pfx_v9fs_mount+0x10/0x10 [ 835.705558] legacy_get_tree+0x109/0x220 [ 835.705604] vfs_get_tree+0x93/0x340 [ 835.705643] path_mount+0x122f/0x1d70 [ 835.705691] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 835.705743] ? __pfx_path_mount+0x10/0x10 [ 835.705787] ? kmem_cache_free+0x2a1/0x460 [ 835.705826] ? putname.part.0+0x11b/0x160 [ 835.705859] ? getname_flags.part.0+0x1c6/0x540 [ 835.705915] ? putname.part.0+0x11b/0x160 [ 835.705963] __x64_sys_mount+0x27b/0x300 [ 835.706010] ? __pfx___x64_sys_mount+0x10/0x10 [ 835.706094] do_syscall_64+0xbf/0x360 [ 835.706129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.706154] RIP: 0033:0x7f163cc09b19 [ 835.706174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 835.706196] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 835.706219] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 835.706234] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 835.706249] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 835.706263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.706277] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 835.706350] 23:27:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 19) 23:27:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:27:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:27:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 23:27:28 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x618440) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xae9, 0x7b618212, 0x1, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x24, 0x0, 'client1\x00', 0x4, "c0500700000000d2", "a26c7283f1af5d9630a70327f71d66ba69506e2f7db969b06b9f8bcf03a1bf9a", 0x0, 0x8}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) 23:27:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xe, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 844.918241] 9pnet_fd: Insufficient options for proto=fd 23:27:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 844.954099] 9pnet_fd: Insufficient options for proto=fd [ 844.955921] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 844.958873] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 844.971173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.973857] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 844.974919] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 844.980058] 9pnet_fd: Insufficient options for proto=fd 23:27:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 20) 23:27:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0xf, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:27:29 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 23:27:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 845.076013] 9pnet_fd: Insufficient options for proto=fd 23:27:29 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x10000, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x304}}, './file0\x00'}) write$rfkill(r8, 0x0, 0x0) [ 845.136428] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 845.147643] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 845.151481] FAULT_INJECTION: forcing a failure. [ 845.151481] name failslab, interval 1, probability 0, space 0, times 0 [ 845.152808] CPU: 1 UID: 0 PID: 7734 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 845.152843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.152858] Call Trace: [ 845.152868] [ 845.152880] dump_stack_lvl+0xfa/0x120 [ 845.152939] should_fail_ex+0x4d7/0x5e0 [ 845.153002] should_failslab+0xc2/0x120 [ 845.153035] __kmalloc_cache_noprof+0x6a/0x3e0 [ 845.153083] ? __pfx_perf_trace_lock+0x10/0x10 [ 845.153113] ? p9_client_create+0xc0/0x11b0 [ 845.153170] p9_client_create+0xc0/0x11b0 [ 845.153220] ? __create_object+0x59/0x80 [ 845.153256] ? lock_release+0xc8/0x290 [ 845.153289] ? __pfx_p9_client_create+0x10/0x10 [ 845.153323] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 845.153386] ? kasan_save_track+0x14/0x30 [ 845.153415] ? __kasan_kmalloc+0x7f/0x90 [ 845.153449] ? trace_kmalloc+0x1f/0xb0 [ 845.153476] ? __kmalloc_node_track_caller_noprof+0x20b/0x490 [ 845.153514] ? v9fs_mount+0x9d/0x9e0 [ 845.153553] ? legacy_get_tree+0x109/0x220 [ 845.153588] ? vfs_get_tree+0x93/0x340 [ 845.153628] ? lockdep_init_map_type+0x4b/0x240 [ 845.153671] ? __raw_spin_lock_init+0x3a/0x110 [ 845.153703] v9fs_session_init+0x1df/0x17a0 [ 845.153732] ? find_held_lock+0x2b/0x80 [ 845.153751] ? __create_object+0x59/0x80 [ 845.153769] ? __pfx_v9fs_session_init+0x10/0x10 [ 845.153786] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 845.153809] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 845.153830] ? __create_object+0x59/0x80 [ 845.153849] ? trace_kmalloc+0x1f/0xb0 [ 845.153861] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 845.153876] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 845.153907] v9fs_mount+0xbc/0x9e0 [ 845.153928] ? __pfx_v9fs_mount+0x10/0x10 [ 845.153952] ? cap_capable+0xdb/0x3b0 [ 845.153973] ? __pfx_v9fs_mount+0x10/0x10 [ 845.153993] legacy_get_tree+0x109/0x220 [ 845.154025] vfs_get_tree+0x93/0x340 [ 845.154045] path_mount+0x122f/0x1d70 [ 845.154071] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 845.154097] ? __pfx_path_mount+0x10/0x10 [ 845.154120] ? kmem_cache_free+0x2a1/0x460 [ 845.154139] ? putname.part.0+0x11b/0x160 [ 845.154157] ? getname_flags.part.0+0x1c6/0x540 [ 845.154179] ? putname.part.0+0x11b/0x160 [ 845.154204] __x64_sys_mount+0x27b/0x300 [ 845.154228] ? __pfx___x64_sys_mount+0x10/0x10 [ 845.154267] do_syscall_64+0xbf/0x360 [ 845.154285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.154299] RIP: 0033:0x7f163cc09b19 [ 845.154310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.154322] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 845.154334] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 845.154342] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 845.154349] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 845.154357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.154364] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 845.154401] [ 845.180845] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 845.189196] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:27:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x3, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:40 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:27:40 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 23:27:40 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = gettid() write$cgroup_pid(r0, &(0x7f0000000200)=r4, 0x12) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f800000000c9d1a93fb6b16774d100"/24, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x88a82, 0x4) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000002c0)={0x66, 0xa6, 0x1000, "17fcf62584103e9779e182ea71e6b9ff9d3d29738e205a3ef7bb61ecf919da8a3d60c9e34d2b8c033d5bc0a04fdfff0415264c0692cef3ddca430d96855b027713733c4a178d1d78fce490fb6fc300dcdd1316104fe9c615fb8832a7590c7fd23547393c6fa8"}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80}) pwritev2(r7, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x1f, @none, 0xff}, 0xe) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r6, 0x0, 0xfdef) 23:27:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x10, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 21) 23:27:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 856.887157] 9pnet_fd: Insufficient options for proto=fd [ 856.906891] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 856.913411] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 22) [ 856.928455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.936446] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 856.941634] 9pnet_fd: Insufficient options for proto=fd [ 856.943483] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x11, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:40 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 23:27:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x10}, {}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 857.072978] FAULT_INJECTION: forcing a failure. [ 857.072978] name failslab, interval 1, probability 0, space 0, times 0 [ 857.080774] CPU: 0 UID: 0 PID: 7764 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 857.080806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 857.080819] Call Trace: [ 857.080828] [ 857.080838] dump_stack_lvl+0xfa/0x120 [ 857.080890] should_fail_ex+0x4d7/0x5e0 [ 857.080944] should_failslab+0xc2/0x120 [ 857.080971] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 857.081011] ? trace_kmalloc+0x1f/0xb0 [ 857.081034] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 857.081064] ? p9_client_create+0x487/0x11b0 [ 857.081111] kstrdup+0x3e/0xc0 [ 857.081158] p9_client_create+0x487/0x11b0 [ 857.081206] ? lock_release+0xc8/0x290 [ 857.081234] ? __pfx_p9_client_create+0x10/0x10 [ 857.081262] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 857.081313] ? kasan_save_track+0x14/0x30 [ 857.081337] ? __kasan_kmalloc+0x7f/0x90 [ 857.081364] ? trace_kmalloc+0x1f/0xb0 [ 857.081386] ? __kmalloc_node_track_caller_noprof+0x20b/0x490 [ 857.081417] ? v9fs_mount+0x9d/0x9e0 [ 857.081449] ? legacy_get_tree+0x109/0x220 [ 857.081478] ? vfs_get_tree+0x93/0x340 [ 857.081510] ? lockdep_init_map_type+0x4b/0x240 [ 857.081540] ? __raw_spin_lock_init+0x3a/0x110 [ 857.081590] v9fs_session_init+0x1df/0x17a0 [ 857.081644] ? find_held_lock+0x2b/0x80 [ 857.081686] ? __create_object+0x59/0x80 [ 857.081722] ? __pfx_v9fs_session_init+0x10/0x10 [ 857.081754] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 857.081796] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 857.081834] ? __create_object+0x59/0x80 [ 857.081869] ? trace_kmalloc+0x1f/0xb0 [ 857.081891] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 857.081919] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 857.081977] v9fs_mount+0xbc/0x9e0 [ 857.082016] ? __pfx_v9fs_mount+0x10/0x10 [ 857.082061] ? cap_capable+0xdb/0x3b0 [ 857.082098] ? __pfx_v9fs_mount+0x10/0x10 [ 857.082135] legacy_get_tree+0x109/0x220 [ 857.082193] vfs_get_tree+0x93/0x340 [ 857.082230] path_mount+0x122f/0x1d70 [ 857.082276] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 857.082324] ? __pfx_path_mount+0x10/0x10 [ 857.082366] ? kmem_cache_free+0x2a1/0x460 [ 857.082402] ? putname.part.0+0x11b/0x160 [ 857.082433] ? getname_flags.part.0+0x1c6/0x540 [ 857.082473] ? putname.part.0+0x11b/0x160 [ 857.082519] __x64_sys_mount+0x27b/0x300 [ 857.082562] ? __pfx___x64_sys_mount+0x10/0x10 [ 857.082636] do_syscall_64+0xbf/0x360 [ 857.082669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.082692] RIP: 0033:0x7f163cc09b19 [ 857.082712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 857.082732] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.082754] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 857.082768] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 857.082782] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 857.082795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 857.082808] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 857.082876] 23:27:41 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 1) 23:27:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 857.202298] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 857.203381] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 857.210381] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 857.212204] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:41 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 23) 23:27:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x12, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 857.304599] 9pnet_fd: Insufficient options for proto=fd [ 857.348924] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 857.351637] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 857.364333] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 857.367241] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 2) 23:27:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:27:52 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:27:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x5, 0x1}}, './file0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x103002, 0x0) write$rfkill(r4, &(0x7f0000000000), 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) write$rfkill(r5, &(0x7f00000000c0)={0x8001, 0x1, 0x0, 0x1}, 0x8) 23:27:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x7, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 24) 23:27:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:27:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x13, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 868.057052] FAULT_INJECTION: forcing a failure. [ 868.057052] name failslab, interval 1, probability 0, space 0, times 0 [ 868.058023] CPU: 1 UID: 0 PID: 7795 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 868.058039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 868.058046] Call Trace: [ 868.058051] [ 868.058057] dump_stack_lvl+0xfa/0x120 [ 868.058087] should_fail_ex+0x4d7/0x5e0 [ 868.058117] should_failslab+0xc2/0x120 [ 868.058132] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 868.058156] ? __pfx_match_token+0x10/0x10 [ 868.058167] ? p9_client_create+0x588/0x11b0 [ 868.058194] kmemdup_nul+0x3b/0xa0 [ 868.058218] p9_client_create+0x588/0x11b0 [ 868.058244] ? lock_release+0xc8/0x290 [ 868.058259] ? __pfx_p9_client_create+0x10/0x10 [ 868.058274] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 868.058302] ? kasan_save_track+0x14/0x30 [ 868.058315] ? __kasan_kmalloc+0x7f/0x90 [ 868.058340] ? trace_kmalloc+0x1f/0xb0 [ 868.058354] ? legacy_get_tree+0x109/0x220 [ 868.058371] ? vfs_get_tree+0x93/0x340 [ 868.058388] ? lockdep_init_map_type+0x4b/0x240 [ 868.058405] ? __raw_spin_lock_init+0x3a/0x110 [ 868.058431] v9fs_session_init+0x1df/0x17a0 [ 868.058461] ? find_held_lock+0x2b/0x80 [ 868.058480] ? __create_object+0x59/0x80 [ 868.058498] ? __pfx_v9fs_session_init+0x10/0x10 [ 868.058515] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 868.058538] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 868.058559] ? __create_object+0x59/0x80 [ 868.058578] ? trace_kmalloc+0x1f/0xb0 [ 868.058590] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 868.058604] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 868.058635] v9fs_mount+0xbc/0x9e0 [ 868.058657] ? __pfx_v9fs_mount+0x10/0x10 [ 868.058685] ? cap_capable+0xdb/0x3b0 [ 868.058706] ? __pfx_v9fs_mount+0x10/0x10 [ 868.058725] legacy_get_tree+0x109/0x220 [ 868.058749] vfs_get_tree+0x93/0x340 [ 868.058768] path_mount+0x122f/0x1d70 [ 868.058794] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 868.058819] ? __pfx_path_mount+0x10/0x10 [ 868.058842] ? kmem_cache_free+0x2a1/0x460 [ 868.058861] ? putname.part.0+0x11b/0x160 [ 868.058877] ? getname_flags.part.0+0x1c6/0x540 [ 868.058899] ? putname.part.0+0x11b/0x160 [ 868.058923] __x64_sys_mount+0x27b/0x300 [ 868.058947] ? __pfx___x64_sys_mount+0x10/0x10 [ 868.058986] do_syscall_64+0xbf/0x360 [ 868.059004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.059017] RIP: 0033:0x7f163cc09b19 [ 868.059027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 868.059038] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 868.059050] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 868.059058] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 868.059065] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 868.059072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 868.059079] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 868.059115] [ 868.089550] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 868.090574] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 868.102078] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 868.106160] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x14, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 868.146797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:27:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 25) 23:27:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:27:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 3) [ 868.207126] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 868.215975] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 868.224556] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 868.230836] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:27:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 868.255710] 9pnet_fd: Insufficient options for proto=fd 23:27:52 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/icmp\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40008, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e10fd00022a30302e4c2c616363657342037a5969656e742c736d61636b6673666c6f6f723d2c00"]) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) getdents(r0, 0x0, 0x0) 23:27:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x16, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:27:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 26) [ 868.301344] FAULT_INJECTION: forcing a failure. [ 868.301344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.302410] CPU: 1 UID: 0 PID: 7820 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 868.302426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 868.302433] Call Trace: [ 868.302437] [ 868.302442] dump_stack_lvl+0xfa/0x120 [ 868.302469] should_fail_ex+0x4d7/0x5e0 [ 868.302492] _copy_from_user+0x30/0xd0 [ 868.302514] memdup_user+0x7e/0xe0 [ 868.302534] strndup_user+0x78/0xe0 [ 868.302554] __x64_sys_mount+0x136/0x300 [ 868.302575] ? __pfx___x64_sys_mount+0x10/0x10 [ 868.302603] do_syscall_64+0xbf/0x360 [ 868.302617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.302630] RIP: 0033:0x7ff0d133eb19 [ 868.302639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 868.302650] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 868.302662] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 868.302674] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 868.302681] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 868.302688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.302695] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 868.302716] [ 868.329292] FAULT_INJECTION: forcing a failure. [ 868.329292] name failslab, interval 1, probability 0, space 0, times 0 [ 868.330476] CPU: 1 UID: 0 PID: 7823 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 868.330492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 868.330498] Call Trace: [ 868.330503] [ 868.330509] dump_stack_lvl+0xfa/0x120 [ 868.330535] should_fail_ex+0x4d7/0x5e0 [ 868.330563] should_failslab+0xc2/0x120 [ 868.330577] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 868.330598] ? perf_trace_lock+0xb5/0x5d0 [ 868.330615] ? parse_opts.part.0+0x8d/0x340 [ 868.330646] kstrdup+0x3e/0xc0 [ 868.330671] parse_opts.part.0+0x8d/0x340 [ 868.330691] ? __virt_addr_valid+0x1c6/0x5d0 [ 868.330715] ? __pfx_parse_opts.part.0+0x10/0x10 [ 868.330735] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 868.330758] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 868.330776] ? lock_release+0xc8/0x290 [ 868.330817] p9_fd_create+0x9b/0x530 [ 868.330838] ? __pfx_p9_fd_create+0x10/0x10 [ 868.330858] ? irq_entries_start+0x4/0xcb0 [ 868.330872] ? p9_client_create+0x784/0x11b0 [ 868.330898] p9_client_create+0x7eb/0x11b0 [ 868.330924] ? lock_release+0xc8/0x290 [ 868.330937] ? __pfx_p9_client_create+0x10/0x10 [ 868.330952] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 868.330979] ? kasan_save_track+0x14/0x30 [ 868.330992] ? __kasan_kmalloc+0x7f/0x90 [ 868.331007] ? trace_kmalloc+0x1f/0xb0 [ 868.331021] ? legacy_get_tree+0x109/0x220 [ 868.331037] ? vfs_get_tree+0x93/0x340 [ 868.331055] ? lockdep_init_map_type+0x4b/0x240 [ 868.331072] ? __raw_spin_lock_init+0x3a/0x110 [ 868.331098] v9fs_session_init+0x1df/0x17a0 [ 868.331128] ? find_held_lock+0x2b/0x80 [ 868.331146] ? __create_object+0x59/0x80 [ 868.331165] ? __pfx_v9fs_session_init+0x10/0x10 [ 868.331182] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 868.331205] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 868.331226] ? __create_object+0x59/0x80 [ 868.331245] ? trace_kmalloc+0x1f/0xb0 [ 868.331257] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 868.331272] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 868.331303] v9fs_mount+0xbc/0x9e0 [ 868.331325] ? __pfx_v9fs_mount+0x10/0x10 [ 868.331349] ? cap_capable+0xdb/0x3b0 [ 868.331370] ? __pfx_v9fs_mount+0x10/0x10 [ 868.331389] legacy_get_tree+0x109/0x220 [ 868.331413] vfs_get_tree+0x93/0x340 [ 868.331433] path_mount+0x122f/0x1d70 [ 868.331457] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 868.331483] ? __pfx_path_mount+0x10/0x10 [ 868.331505] ? kmem_cache_free+0x2a1/0x460 [ 868.331525] ? putname.part.0+0x11b/0x160 [ 868.331541] ? getname_flags.part.0+0x1c6/0x540 [ 868.331563] ? putname.part.0+0x11b/0x160 [ 868.331587] __x64_sys_mount+0x27b/0x300 [ 868.331610] ? __pfx___x64_sys_mount+0x10/0x10 [ 868.331650] do_syscall_64+0xbf/0x360 [ 868.331667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.331679] RIP: 0033:0x7f163cc09b19 [ 868.331689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 868.331701] RSP: 002b:00007f163a17f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 868.331712] RAX: ffffffffffffffda RBX: 00007f163cd1cf60 RCX: 00007f163cc09b19 [ 868.331720] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 868.331727] RBP: 00007f163a17f1d0 R08: 0000000020001500 R09: 0000000000000000 [ 868.331734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 868.331741] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 868.331777] [ 868.403363] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 868.412604] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 868.428222] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 868.435949] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:28:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 4) 23:28:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:28:01 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:28:01 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:28:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 27) 23:28:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x2f}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) 23:28:01 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x17, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 877.532944] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 877.540640] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 877.548156] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 877.549039] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 877.567084] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.567975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.575536] FAULT_INJECTION: forcing a failure. [ 877.575536] name failslab, interval 1, probability 0, space 0, times 0 [ 877.577577] CPU: 0 UID: 0 PID: 7847 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 877.577609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.577623] Call Trace: [ 877.577632] [ 877.577642] dump_stack_lvl+0xfa/0x120 [ 877.577704] should_fail_ex+0x4d7/0x5e0 [ 877.577757] ? getname_flags.part.0+0x48/0x540 [ 877.577786] should_failslab+0xc2/0x120 [ 877.577813] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 877.577847] ? lock_release+0xc8/0x290 [ 877.577879] ? __might_fault+0xe0/0x190 [ 877.577921] getname_flags.part.0+0x48/0x540 [ 877.577966] getname_flags+0x95/0xe0 [ 877.578010] user_path_at+0x27/0x90 [ 877.578056] __x64_sys_mount+0x1e9/0x300 [ 877.578104] ? __pfx___x64_sys_mount+0x10/0x10 [ 877.578184] do_syscall_64+0xbf/0x360 [ 877.578219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.578244] RIP: 0033:0x7ff0d133eb19 [ 877.578263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.578285] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 877.578307] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 877.578323] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 877.578337] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 877.578351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.578365] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 877.578437] 23:28:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:28:01 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 877.615361] 9pnet_fd: Insufficient options for proto=fd [ 877.616956] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.643546] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 877.648820] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:28:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) (fail_nth: 28) [ 877.669543] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 877.674792] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:28:01 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xe97, 0x3f, 0x6, 0x8001}, {0x9, 0x8, 0x3, 0x8000}, {0x800, 0x6, 0x9, 0xffffffff}, {0x6, 0x8, 0x2, 0xaecd}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) close(r1) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x200, 0xa0, 0x38, 0x7}, {0x101, 0x7, 0x9}]}, 0x10) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d550d", 0xe}], 0x1}}, {{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "e8afc870753ff6119517271f31116d25438a6fe9b5be0fe0bc98ec86fa7d229ea58ff66ffeeeeaacf7659d58bb0c057b08a4030000000000000100"}, 0x80, 0x0}}], 0x2, 0x0) 23:28:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 5) [ 877.714313] 9pnet_fd: Insufficient options for proto=fd 23:28:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 877.717548] FAULT_INJECTION: forcing a failure. [ 877.717548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.719564] CPU: 0 UID: 0 PID: 7860 Comm: syz-executor.4 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 877.719595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.719608] Call Trace: [ 877.719617] [ 877.719628] dump_stack_lvl+0xfa/0x120 [ 877.719689] should_fail_ex+0x4d7/0x5e0 [ 877.719746] _copy_to_user+0x32/0xd0 [ 877.719802] simple_read_from_buffer+0xe0/0x180 [ 877.719849] proc_fail_nth_read+0x18a/0x240 [ 877.719900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.719949] ? security_file_permission+0x22/0x90 [ 877.719992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.720038] vfs_read+0x1eb/0xc70 [ 877.720101] ? __pfx_vfs_read+0x10/0x10 [ 877.720148] ? lock_release+0xc8/0x290 [ 877.720194] ? __fget_files+0x20d/0x3b0 [ 877.720272] ksys_read+0x121/0x240 [ 877.720312] ? __pfx_ksys_read+0x10/0x10 [ 877.720388] do_syscall_64+0xbf/0x360 [ 877.720423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.720448] RIP: 0033:0x7f163cbbc69c [ 877.720467] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 877.720489] RSP: 002b:00007f163a17f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 877.720512] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f163cbbc69c [ 877.720527] RDX: 000000000000000f RSI: 00007f163a17f1e0 RDI: 0000000000000004 [ 877.720542] RBP: 00007f163a17f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 877.720556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 877.720569] R13: 00007ffdca59f42f R14: 00007f163a17f300 R15: 0000000000022000 [ 877.720644] 23:28:01 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x19, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:28:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 6) [ 877.826629] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 877.832611] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 877.844494] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 877.846408] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 877.885642] FAULT_INJECTION: forcing a failure. [ 877.885642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.888242] CPU: 0 UID: 0 PID: 7874 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 877.888274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.888287] Call Trace: [ 877.888297] [ 877.888308] dump_stack_lvl+0xfa/0x120 [ 877.888362] should_fail_ex+0x4d7/0x5e0 [ 877.888418] strncpy_from_user+0x3b/0x2f0 [ 877.888468] getname_flags.part.0+0x8d/0x540 [ 877.888513] getname_flags+0x95/0xe0 [ 877.888558] user_path_at+0x27/0x90 [ 877.888603] __x64_sys_mount+0x1e9/0x300 [ 877.888650] ? __pfx___x64_sys_mount+0x10/0x10 [ 877.888737] do_syscall_64+0xbf/0x360 [ 877.888773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.888800] RIP: 0033:0x7ff0d133eb19 [ 877.888819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.888841] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 877.888864] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 877.888880] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 877.888894] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 877.888908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.888922] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 877.888995] 23:28:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x21, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:28:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:28:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 7) 23:28:11 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:28:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:28:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:28:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x9, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:28:11 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@lsrr={0x83, 0x7, 0x88, [@multicast1]}, @lsrr={0x83, 0x3, 0x56}]}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$setstatus(r2, 0x4, 0x2000) [ 887.933390] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 887.941860] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 887.943152] FAULT_INJECTION: forcing a failure. [ 887.943152] name failslab, interval 1, probability 0, space 0, times 0 [ 887.944058] CPU: 1 UID: 0 PID: 7888 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 887.944074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 887.944081] Call Trace: [ 887.944086] [ 887.944091] dump_stack_lvl+0xfa/0x120 [ 887.944118] should_fail_ex+0x4d7/0x5e0 [ 887.944142] should_failslab+0xc2/0x120 [ 887.944155] __kmalloc_cache_noprof+0x6a/0x3e0 [ 887.944171] ? __get_fs_type+0xe6/0x160 [ 887.944183] ? lock_release+0xc8/0x290 [ 887.944197] ? alloc_fs_context+0x58/0x9e0 [ 887.944218] alloc_fs_context+0x58/0x9e0 [ 887.944240] path_mount+0xab9/0x1d70 [ 887.944262] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 887.944285] ? __pfx_path_mount+0x10/0x10 [ 887.944305] ? kmem_cache_free+0x2a1/0x460 [ 887.944322] ? putname.part.0+0x11b/0x160 [ 887.944337] ? getname_flags.part.0+0x1c6/0x540 [ 887.944354] ? putname.part.0+0x11b/0x160 [ 887.944371] __x64_sys_mount+0x27b/0x300 [ 887.944391] ? __pfx___x64_sys_mount+0x10/0x10 [ 887.944418] do_syscall_64+0xbf/0x360 [ 887.944433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.944446] RIP: 0033:0x7ff0d133eb19 [ 887.944455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.944466] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 887.944478] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 887.944486] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 887.944493] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 887.944500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.944507] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 887.944526] [ 887.954270] 9pnet_fd: Insufficient options for proto=fd [ 887.963207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.966483] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 887.967328] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:28:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 8) 23:28:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x26, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:28:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:28:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 888.076011] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 888.083010] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:28:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x2, 0x6, @multicast}, 0x10) 23:28:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:12 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 888.165029] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 888.169879] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 888.178506] 9pnet_fd: Insufficient options for proto=fd [ 888.180300] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:28:12 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 9) [ 888.183277] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 888.258485] FAULT_INJECTION: forcing a failure. [ 888.258485] name failslab, interval 1, probability 0, space 0, times 0 [ 888.260561] CPU: 0 UID: 0 PID: 7917 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 888.260592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 888.260606] Call Trace: [ 888.260615] [ 888.260626] dump_stack_lvl+0xfa/0x120 [ 888.260686] should_fail_ex+0x4d7/0x5e0 [ 888.260742] should_failslab+0xc2/0x120 [ 888.260771] __kmalloc_cache_noprof+0x6a/0x3e0 [ 888.260813] ? lockdep_init_map_type+0x4b/0x240 [ 888.260843] ? legacy_init_fs_context+0x44/0xe0 [ 888.260898] legacy_init_fs_context+0x44/0xe0 [ 888.260934] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 888.260969] alloc_fs_context+0x570/0x9e0 [ 888.261032] path_mount+0xab9/0x1d70 [ 888.261082] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 888.261134] ? __pfx_path_mount+0x10/0x10 [ 888.261179] ? kmem_cache_free+0x2a1/0x460 [ 888.261218] ? putname.part.0+0x11b/0x160 [ 888.261251] ? getname_flags.part.0+0x1c6/0x540 [ 888.261294] ? putname.part.0+0x11b/0x160 [ 888.261343] __x64_sys_mount+0x27b/0x300 [ 888.261390] ? __pfx___x64_sys_mount+0x10/0x10 [ 888.261469] do_syscall_64+0xbf/0x360 [ 888.261504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.261529] RIP: 0033:0x7ff0d133eb19 [ 888.261548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.261570] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 888.261593] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 888.261609] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 888.261623] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.261637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.261651] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 888.261724] 23:28:22 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0xee01, 0x0, 0x0]) r1 = getpid() pidfd_open(r1, 0x0) getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000008b40), &(0x7f0000008b80)=0xc) r2 = getpid() r3 = pidfd_open(r2, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r4, r4]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getgroups(0x6, &(0x7f0000000480)=[r4, r4, r5, 0xee01, r7, r8]) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b000)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="5038d35c2e1453f29e76b20d6d05776931ea70c01bfb580381b26bde9609e8478d509ec1f41396e6555c86b96c19651c2ac42630e1bdd3c60a78ecb72d82544cf854b9419a", 0x45}, {&(0x7f0000000600)="c4df5b210cb8cbd8816a451502a22effcaf5928d6d267b2e4fc24e7bbacc315fa5a765f15c7eae9c429490af7102d308bd3acaf1b9e35ece715c44d66cb6c3c1cf7041d331a7da687fdaf2c8bf88967b4adb5ceb96e6d60019536c279a90f8e9af90ca5d8bb02ba21ba04f77d52a4017a38c3de3fd9983de5a00500d967e54a1d7b4fac313c2abdf7bfdd7790318440956a5c63f316e9f550c93d5b118db555fc4cb8ce28ea3ac2002991131", 0xac}, {&(0x7f00000006c0)="696b4dd3", 0x4}, {&(0x7f0000000700)="3287ba88a93c31f2b8ea1a", 0xb}], 0x4, 0x0, 0x0, 0x40840}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)="1c8a95b7130a1d38429751c93263e0eacea90e022e482344a746836aca72ea03fd7ceb10dbc950391626bd95c17b3e47475c71da51ec20a0e91c22e4b3e9da84", 0x40}, {&(0x7f0000000840)="7c11477dee1ed52e65ca878d2b33e023a0471b64ced8b043371062916f89efb4e8bbfa396dcf905ad5072bc768655bd563bf0f025e94349ee79d5a76c1f17109afb996386742b93e45bfb924598e5f40b8dba4c1907cd2879fcc64ada6279b9ec0495159fa09f00d62af96b6e857c9c7657bec1e9e5166a05c4d85", 0x7b}], 0x2, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0xb8, 0x4000000}}, {{&(0x7f0000008c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000af80)=[{&(0x7f0000008d00)="055401abadb96b074d9f356aa5164dbc710fa1f383f2b305011d74411a1bb119fa67daf8a6a8cd8eb6de9b8f77f78b8e44dd31f9642b1ae0cdb3ad17af8bbc953013c2f3cca30858b34112ebd3c668cfd3c2715f79717c6a57ee72ec0caf3957c16fe44209a5b5732fe3ca3f74c8b00112107ed58c7d54f4130dcefef6f90cc932a68e43707aca7ce7b2b8972090c148ae65d80dcf2a298a4d768c7048f0c9040a401c4a85395f3037e1300c01a063bf4b0c5ed010989efb731aaa114e2508c9c04cb9f9e7b343b604f46ae05846e2129267c4457937b1ce91581a", 0xdb}, {&(0x7f0000008e00)="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", 0x1000}, {&(0x7f00000004c0)="90ad17e58baf75fa7ce48365dc4c9634236c1e2703c882fe213a7b4d9d", 0x1d}, {&(0x7f0000009e40)="bcae6b31941bc2ab3076daddbff38dfad4729f790c78cf4db47aa65015657663e8d31bb56319a0f39f6306d832bae44ad580c056377eaa98e21a16e6f9cb65e938fdda2d65403b3c15b17dff00583fcd381b281f040103009d6014f5f40eea4913f31f708b0317369ea91fe876cb18b661fd80d3161f5c583a2bba42cf09b6c9affedf0b007c9f15b622a2e3564d973d1e3731ea7175f51fcadc66a2086a78e94ae99db5ac0370", 0xa7}, {&(0x7f0000009f00)="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", 0x1000}, {&(0x7f0000000b00)="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"/289, 0x121}], 0x6, 0x0, 0x0, 0x20000000}}], 0x3, 0x24000084) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000040)={0x10000000}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8982, &(0x7f0000000100)={0x6, 'netpci0\x00', {0x401}, 0x7f}) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, 0x0, &(0x7f00000008c0)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)="0ad48b5c103a66d3054d49dc5440101b250bf6538fdbeadfcb9af6e774fd2ab98f556c1f666663aa234249ba9843ec2638dbfd7e739bb61e788e865f68bec6034b15a12983bee526407676c8d542009ef8182ee228a1a0e7f35e1c18b18838e9cb5107d27fcdf03da3c62a97e77448ccae06254d8dc628d35a8ef0948d4727e9b8433b23b97d1927046da77717ed5368ca2bcfa2d6c82a3b1e7b03", 0x9b}, {&(0x7f0000000280)="9bfb2e89935e330cafa8ede73215097c785730f26749c4f600c04af26385889eb58e0f53cb1ac5cdfd9c8e65292cf3ec36a5e7924f8722d05c6f995f10886bcc630048e0ead58f4c0cb4fb6b47f2c6beedd96a05ae4725dccd9b2e3d15bfd74c5ff83b407583ea8d05c260eba5274144c80f6a19db686f3ece2bd84d117d875b906708e99b38cadcb725576ee875bd68e654c488741ffdded97eb215b33dffa3ddd7777738b96b238fef1f9ffe40921cc003f60d34da9ccf28b180183e4c5d0a5622586fbea0d0ec66c5afbff1f431c51e47d6742a490d57b0c5737f31aeccbc26f374ded13bb6984a324911d9156aa48e53ddb0", 0xf4}], 0x2, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x5da}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0xfffffff5}}], 0x90}, 0x80) 23:28:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x3, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:28:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xa, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:28:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:28:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x3, 0x6, @multicast}, 0x10) 23:28:22 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:28:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 10) 23:28:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) [ 898.295855] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 898.303906] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 898.312147] 9pnet_fd: Insufficient options for proto=fd 23:28:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 11) 23:28:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 23:28:22 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x4, 0x6, @multicast}, 0x10) 23:28:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 898.401746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.420302] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 898.427234] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:28:22 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {0xffffffffffffffff, 0x141d}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x8, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 898.431216] 9pnet_fd: Insufficient options for proto=fd [ 898.437521] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 898.439531] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 898.477344] FAULT_INJECTION: forcing a failure. [ 898.477344] name failslab, interval 1, probability 0, space 0, times 0 [ 898.479388] CPU: 0 UID: 0 PID: 7950 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 898.479419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 898.479432] Call Trace: [ 898.479440] [ 898.479451] dump_stack_lvl+0xfa/0x120 [ 898.479503] should_fail_ex+0x4d7/0x5e0 [ 898.479556] should_failslab+0xc2/0x120 [ 898.479583] __kmalloc_cache_noprof+0x6a/0x3e0 [ 898.479614] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 898.479648] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 898.479680] ? v9fs_mount+0x9d/0x9e0 [ 898.479732] v9fs_mount+0x9d/0x9e0 [ 898.479771] ? __pfx_v9fs_mount+0x10/0x10 [ 898.479803] ? lockdep_init_map_type+0x4b/0x240 [ 898.479838] ? cap_capable+0xdb/0x3b0 [ 898.479875] ? __pfx_v9fs_mount+0x10/0x10 [ 898.479912] legacy_get_tree+0x109/0x220 [ 898.479957] vfs_get_tree+0x93/0x340 [ 898.479995] path_mount+0x122f/0x1d70 [ 898.480041] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 898.480091] ? __pfx_path_mount+0x10/0x10 [ 898.480132] ? kmem_cache_free+0x2a1/0x460 [ 898.480169] ? putname.part.0+0x11b/0x160 [ 898.480199] ? getname_flags.part.0+0x1c6/0x540 [ 898.480240] ? putname.part.0+0x11b/0x160 [ 898.480285] __x64_sys_mount+0x27b/0x300 [ 898.480328] ? __pfx___x64_sys_mount+0x10/0x10 [ 898.480402] do_syscall_64+0xbf/0x360 [ 898.480434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.480458] RIP: 0033:0x7ff0d133eb19 [ 898.480476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 898.480497] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 898.480518] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 898.480533] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 898.480546] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 898.480559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 898.480572] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 898.480640] [ 901.022495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 901.028198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 901.031239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 901.037460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 901.042064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 903.061796] Bluetooth: hci3: command tx timeout [ 905.108829] Bluetooth: hci3: command tx timeout [ 907.156852] Bluetooth: hci3: command tx timeout [ 909.205796] Bluetooth: hci3: command tx timeout [ 922.028179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.029264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.076382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.077824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.227795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:28:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x5, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:28:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x5, 0x6, @multicast}, 0x10) 23:28:56 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:28:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xb, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:28:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x7484}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:28:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 12) 23:28:56 executing program 6: r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000001780), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/235, 0xeb}, {&(0x7f0000000200)}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) io_uring_setup(0x3a1a, &(0x7f0000000380)={0x0, 0x8e42, 0x2, 0x2, 0x20, 0x0, r5}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7fc6629b61636b6666642c2c61756469742c6d6561737572658c643d00"/50, @ANYRESDEC=r4, @ANYBLOB=',subj_user=@,\x00']) syz_io_uring_setup(0x59e1, &(0x7f0000000100)={0x0, 0x55ca, 0x1, 0x2, 0x3bd, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 23:28:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 932.156468] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 932.164400] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 932.177490] 9pnet_fd: Insufficient options for proto=fd [ 932.183864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:28:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 13) 23:28:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:28:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:28:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x6, 0x6, @multicast}, 0x10) 23:28:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:28:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='.\"', 0x2}], 0x1, 0x0, 0x0, 0x0) [ 932.353044] FAULT_INJECTION: forcing a failure. [ 932.353044] name failslab, interval 1, probability 0, space 0, times 0 [ 932.354988] CPU: 0 UID: 0 PID: 8440 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 932.355017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.355029] Call Trace: [ 932.355037] [ 932.355047] dump_stack_lvl+0xfa/0x120 [ 932.355096] should_fail_ex+0x4d7/0x5e0 [ 932.355148] should_failslab+0xc2/0x120 [ 932.355173] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 932.355207] ? v9fs_mount+0x9d/0x9e0 [ 932.355250] ? legacy_get_tree+0x109/0x220 [ 932.355279] ? vfs_get_tree+0x93/0x340 [ 932.355305] ? path_mount+0x122f/0x1d70 [ 932.355339] ? __x64_sys_mount+0x27b/0x300 [ 932.355374] ? v9fs_session_init+0xaa/0x17a0 [ 932.355400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.355443] kstrdup+0x3e/0xc0 [ 932.355482] v9fs_session_init+0xaa/0x17a0 [ 932.355533] ? find_held_lock+0x2b/0x80 [ 932.355569] ? __create_object+0x59/0x80 [ 932.355603] ? __pfx_v9fs_session_init+0x10/0x10 [ 932.355635] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 932.355686] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 932.355722] ? __create_object+0x59/0x80 [ 932.355757] ? trace_kmalloc+0x1f/0xb0 [ 932.355779] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 932.355806] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 932.355861] v9fs_mount+0xbc/0x9e0 [ 932.355900] ? __pfx_v9fs_mount+0x10/0x10 [ 932.355930] ? lockdep_init_map_type+0x4b/0x240 [ 932.355963] ? cap_capable+0xdb/0x3b0 [ 932.356000] ? __pfx_v9fs_mount+0x10/0x10 [ 932.356035] legacy_get_tree+0x109/0x220 [ 932.356078] vfs_get_tree+0x93/0x340 [ 932.356114] path_mount+0x122f/0x1d70 [ 932.356157] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 932.356204] ? __pfx_path_mount+0x10/0x10 [ 932.356245] ? kmem_cache_free+0x2a1/0x460 [ 932.356280] ? putname.part.0+0x11b/0x160 [ 932.356310] ? getname_flags.part.0+0x1c6/0x540 [ 932.356350] ? putname.part.0+0x11b/0x160 [ 932.356394] __x64_sys_mount+0x27b/0x300 [ 932.356436] ? __pfx___x64_sys_mount+0x10/0x10 [ 932.356508] do_syscall_64+0xbf/0x360 [ 932.356540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.356561] RIP: 0033:0x7ff0d133eb19 [ 932.356579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.356599] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.356620] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 932.356634] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 932.356648] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 932.356660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.356673] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 932.356739] [ 932.398177] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 932.406863] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 932.429905] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 932.435476] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 932.457396] 9pnet_fd: Insufficient options for proto=fd 23:28:56 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x7, 0x6, @multicast}, 0x10) 23:28:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 14) 23:28:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x7, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:28:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 932.616893] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 932.625380] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 932.636908] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 932.655001] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 932.703922] 9pnet_fd: Insufficient options for proto=fd 23:29:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 15) 23:29:07 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x10, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x9, 0x6, @multicast}, 0x10) 23:29:07 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:29:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 1) 23:29:07 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:29:07 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x804000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@appraise}, {@fowner_gt={'fowner>', 0xee00}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]}}) r5 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) close(r5) close(r1) [ 943.524092] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 943.530272] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 943.553933] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 943.560528] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 943.586075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.607010] FAULT_INJECTION: forcing a failure. [ 943.607010] name failslab, interval 1, probability 0, space 0, times 0 [ 943.609204] CPU: 0 UID: 0 PID: 8483 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 943.609236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.609250] Call Trace: [ 943.609259] [ 943.609270] dump_stack_lvl+0xfa/0x120 [ 943.609323] should_fail_ex+0x4d7/0x5e0 [ 943.609379] should_failslab+0xc2/0x120 [ 943.609406] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 943.609442] ? v9fs_mount+0x9d/0x9e0 [ 943.609476] ? legacy_get_tree+0x109/0x220 [ 943.609506] ? vfs_get_tree+0x93/0x340 [ 943.609537] ? __x64_sys_mount+0x220/0x300 [ 943.609575] ? v9fs_session_init+0xeb/0x17a0 [ 943.609628] kstrdup+0x3e/0xc0 [ 943.609678] v9fs_session_init+0xeb/0x17a0 [ 943.609734] ? find_held_lock+0x2b/0x80 [ 943.609772] ? __create_object+0x59/0x80 [ 943.609809] ? __pfx_v9fs_session_init+0x10/0x10 [ 943.609843] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 943.609890] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 943.609930] ? __create_object+0x59/0x80 [ 943.609968] ? trace_kmalloc+0x1f/0xb0 [ 943.609991] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 943.610021] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 943.610082] v9fs_mount+0xbc/0x9e0 [ 943.610124] ? __pfx_v9fs_mount+0x10/0x10 [ 943.610158] ? lockdep_init_map_type+0x4b/0x240 [ 943.610193] ? cap_capable+0xdb/0x3b0 [ 943.610233] ? __pfx_v9fs_mount+0x10/0x10 [ 943.610272] legacy_get_tree+0x109/0x220 [ 943.610319] vfs_get_tree+0x93/0x340 [ 943.610358] path_mount+0x122f/0x1d70 [ 943.610405] ? trace_irq_enable.constprop.0+0xc2/0x100 23:29:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x9, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 943.610457] ? __pfx_path_mount+0x10/0x10 [ 943.610501] ? kmem_cache_free+0x2a1/0x460 [ 943.610540] ? putname.part.0+0x11b/0x160 [ 943.610572] ? getname_flags.part.0+0x1c6/0x540 [ 943.610615] ? putname.part.0+0x11b/0x160 [ 943.610664] __x64_sys_mount+0x27b/0x300 [ 943.610710] ? __pfx___x64_sys_mount+0x10/0x10 [ 943.610788] do_syscall_64+0xbf/0x360 [ 943.610823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.610847] RIP: 0033:0x7ff0d133eb19 [ 943.610867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 943.610889] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 943.610911] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 943.610927] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 943.610941] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 943.610955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 943.610969] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 943.611041] 23:29:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf7e49a1d95947318303ae70299e26a0010040", 0x1f, 0x1000}, {&(0x7f0000012300)="ed81000064000000e0", 0x9, 0x4c7}], 0x0, &(0x7f0000014100)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x2) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/156, 0x9c) fsync(r0) 23:29:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x10, 0x6, @multicast}, 0x10) 23:29:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 16) [ 943.741982] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 943.748282] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 2) [ 943.774515] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 943.781193] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:07 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:29:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xa, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:07 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x17, 0x6, @multicast}, 0x10) 23:29:07 executing program 6: creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x22420, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$getflags(0xffffffffffffffff, 0x408) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) r7 = getpid() pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r4, @ANYBLOB="c11050ef2c7766", @ANYRESHEX=r6, @ANYRES32=r7]) sendfile(r6, r2, 0x0, 0x68e146a1) [ 943.957936] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 943.964181] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 943.977505] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 943.980985] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 17) 23:29:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:18 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:29:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:29:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x21, 0x6, @multicast}, 0x10) 23:29:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x300, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:18 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="001200ffff00f5ffffff040000800000001a65584eebe0d6a3d17fe6f451e78387b9e36b0f72278f3d69d8d4091a0fc609001e46910a2c246e48be197a4e04587e74607bae377160c905aa6d4cf82304c4ea926058c0377fd2ceae6a6a857d08e4"], 0x14}], 0x1}, 0x0) connect(r0, &(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x4, 0x0, 0x2, 0x4}}, 0x80) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x218, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f9f075a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @loopback, 0x1f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x8014}, 0x4040004) syz_open_procfs$userns(0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'team_slave_1\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000012d9d05cbb710000068667a4af0c4771f7b1f2e82b30824240b8751a718c3fc95d9485a414d0b63c31be75407490c819a4a2304f902d92d2b3f85d546b6d4e1df306be047c02e5450fb41c861f5012667931199965cef3f227ef442e42952840192bfb13173a262dd53405d4d4970b62176129c1194a9b05da322d9b3fd6cf57af6cc4d2f26da2e29003f2d7a1f8d6f1e80c60d2438ebdc660baf1e1c35f546f18a125e29b056458ad9f9417cb4a109316d6a9937ab9d704923b77eb7cb3ccb5b0ba1edbc585f908f00d597c"], 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000880)={r4, r5/1000+60000}, 0x10) r6 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000500)=@in6={0xa, 0x4e23, 0x1f, @private2, 0x8000}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000ff00000008000000d75ab0000000000058000000002300000401000000000000a66be181cca32e37642e80e643cc5e068c10023b42fa8159d6327a874040e38be0fa97e44398d85ba2df927de9dc740c4ace6cb6127351cf64d318e2e0b5e7645c58aab9bd12c5c05000000000000000010100000100000086a7306af24f976f160cc90234a1e3af99dd4b98650b40609fec3c961563e368534511fecc2c66e0436096982f5e774ef7ff0bbb01580b88ff43b53e2bec166abcd688a6adfb3602660000000000c00000000000000016010000020000004e62f34f34df1a69cfdc9611038c22cd7b18f9d1fcab3592ced47ceefaae47997e3bee6fbe949d623c46f7fad792b09bcdb1ec67c73d12ceb6237b00cf9a5d264592bca5776952eca00cb226c5897b29e5f0c773f9d0098a6e6e5fb1cb5a7446e34745d4104623064a810b6f35faad0bd105792746cc5a2c3ebf1c830ed70966d23119f4300d7384516512815a0525f292185677856b7a2a52aa50f7abc4ae9a2a000000000000b80000000000000001010000ffffffffb9aff97db81115e8ed8464630cecc3876cdac9ce81dbcab185c9eaeae85427bf18bb58fcd6b736f1ca3e882b7d53863819b0913bba770c24990f0876491ee5e70dbb5c5fc67e15849f525d35b3d37873140104eee02f3c580acb4350cdf3e6766148f18805fad7e208f2d71621a1e5791bed27a7011b676d7618405a46f4ae72b019412c2a6c6990854d17e137bf97faa6188858caae3e83c9a16d12c7cdc915bbeb"], 0x238}, 0x1) [ 954.477631] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 954.482749] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x10, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x27, 0x6, @multicast}, 0x10) [ 954.573069] FAULT_INJECTION: forcing a failure. [ 954.573069] name failslab, interval 1, probability 0, space 0, times 0 [ 954.575011] CPU: 0 UID: 0 PID: 8530 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 954.575041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 954.575053] Call Trace: [ 954.575062] [ 954.575072] dump_stack_lvl+0xfa/0x120 [ 954.575121] should_fail_ex+0x4d7/0x5e0 [ 954.575173] should_failslab+0xc2/0x120 [ 954.575199] __kmalloc_cache_noprof+0x6a/0x3e0 [ 954.575239] ? __pfx_perf_trace_lock+0x10/0x10 [ 954.575263] ? p9_client_create+0xc0/0x11b0 [ 954.575310] p9_client_create+0xc0/0x11b0 [ 954.575351] ? __create_object+0x59/0x80 [ 954.575380] ? lock_release+0xc8/0x290 [ 954.575407] ? __pfx_p9_client_create+0x10/0x10 [ 954.575435] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 954.575486] ? kasan_save_track+0x14/0x30 [ 954.575510] ? __kasan_kmalloc+0x7f/0x90 [ 954.575537] ? trace_kmalloc+0x1f/0xb0 [ 954.575570] ? __kmalloc_node_track_caller_noprof+0x20b/0x490 [ 954.575602] ? v9fs_mount+0x9d/0x9e0 [ 954.575634] ? legacy_get_tree+0x109/0x220 [ 954.575668] ? vfs_get_tree+0x93/0x340 [ 954.575699] ? lockdep_init_map_type+0x4b/0x240 [ 954.575730] ? __raw_spin_lock_init+0x3a/0x110 [ 954.575779] v9fs_session_init+0x1df/0x17a0 [ 954.575832] ? find_held_lock+0x2b/0x80 [ 954.575867] ? __create_object+0x59/0x80 [ 954.575900] ? __pfx_v9fs_session_init+0x10/0x10 [ 954.575932] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 954.575974] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 954.576011] ? __create_object+0x59/0x80 [ 954.576047] ? trace_kmalloc+0x1f/0xb0 [ 954.576069] ? __kmalloc_cache_noprof+0x1b3/0x3e0 [ 954.576096] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 954.576153] v9fs_mount+0xbc/0x9e0 [ 954.576192] ? __pfx_v9fs_mount+0x10/0x10 [ 954.576224] ? lockdep_init_map_type+0x4b/0x240 [ 954.576257] ? cap_capable+0xdb/0x3b0 [ 954.576294] ? __pfx_v9fs_mount+0x10/0x10 [ 954.576331] legacy_get_tree+0x109/0x220 [ 954.576374] vfs_get_tree+0x93/0x340 [ 954.576411] path_mount+0x122f/0x1d70 [ 954.576457] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 954.576504] ? __pfx_path_mount+0x10/0x10 [ 954.576546] ? kmem_cache_free+0x2a1/0x460 [ 954.576582] ? putname.part.0+0x11b/0x160 [ 954.576613] ? getname_flags.part.0+0x1c6/0x540 [ 954.576653] ? putname.part.0+0x11b/0x160 [ 954.576698] __x64_sys_mount+0x27b/0x300 [ 954.576741] ? __pfx___x64_sys_mount+0x10/0x10 [ 954.576815] do_syscall_64+0xbf/0x360 [ 954.576847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.576870] RIP: 0033:0x7ff0d133eb19 [ 954.576889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.576909] RSP: 002b:00007ff0ce8b4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 954.576930] RAX: ffffffffffffffda RBX: 00007ff0d1451f60 RCX: 00007ff0d133eb19 [ 954.576945] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000000000000 [ 954.576958] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 954.576971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.576984] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 954.577052] [ 954.678001] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 954.680038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.687589] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 954.708334] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 954.715015] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 18) 23:29:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x300, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {0xffffffffffffffff, 0x4000}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:29:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x30, 0x6, @multicast}, 0x10) 23:29:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x500, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 954.915661] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 954.929331] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 954.943096] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 954.947086] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) (fail_nth: 19) 23:29:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x63, 0x6, @multicast}, 0x10) 23:29:28 executing program 6: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r0, &(0x7f0000000200)=""/193, 0xc1, 0x300) 23:29:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x700, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:29:28 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:29:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x600, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x700, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 964.679636] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 964.681923] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 964.686627] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 964.690395] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 964.718147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:29:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0xc00e, 0x6, @multicast}, 0x10) [ 964.760370] FAULT_INJECTION: forcing a failure. [ 964.760370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.762422] CPU: 0 UID: 0 PID: 8588 Comm: syz-executor.2 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 964.762453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 964.762467] Call Trace: [ 964.762476] [ 964.762486] dump_stack_lvl+0xfa/0x120 [ 964.762539] should_fail_ex+0x4d7/0x5e0 [ 964.762595] _copy_to_user+0x32/0xd0 [ 964.762651] simple_read_from_buffer+0xe0/0x180 [ 964.762707] proc_fail_nth_read+0x18a/0x240 [ 964.762757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 964.762807] ? security_file_permission+0x22/0x90 [ 964.762850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 964.762896] vfs_read+0x1eb/0xc70 [ 964.762959] ? __pfx_vfs_read+0x10/0x10 [ 964.763006] ? lock_release+0xc8/0x290 [ 964.763052] ? __fget_files+0x20d/0x3b0 [ 964.763131] ksys_read+0x121/0x240 [ 964.763171] ? __pfx_ksys_read+0x10/0x10 [ 964.763247] do_syscall_64+0xbf/0x360 [ 964.763282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.763307] RIP: 0033:0x7ff0d12f169c [ 964.763327] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 964.763349] RSP: 002b:00007ff0ce8b4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 964.763371] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007ff0d12f169c 23:29:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x810, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 964.763387] RDX: 000000000000000f RSI: 00007ff0ce8b41e0 RDI: 0000000000000004 [ 964.763401] RBP: 00007ff0ce8b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 964.763415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 964.763429] R13: 00007ffe9eac0eff R14: 00007ff0ce8b4300 R15: 0000000000022000 [ 964.763503] [ 964.777918] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:29:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x3, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 964.805113] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 964.815909] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 964.817056] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x2, @multicast}, 0x10) 23:29:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8c4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:28 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x73c382cd}) [ 964.884406] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 964.887398] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:29:28 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x3, @multicast}, 0x10) [ 964.959088] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 9 (only 16 groups) [ 965.022277] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 965.025644] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:29:39 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x810, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:39 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x4, @multicast}, 0x10) 23:29:39 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:29:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:29:39 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000280)="200000005100000003000000320000000f000000000000000200000402000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef4f48f41b0000e0f4655f000000000000000001000000000000000b000000000147974de8fd25ad0582a862b7", 0x66, 0x400}, {0x0, 0xffffffffffffff67, 0x1000}], 0x0, &(0x7f0000000140)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_gt={'uid>', r0}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 23:29:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8cb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x7, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:29:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 975.445144] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 975.454582] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 975.461161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.465287] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 975.474849] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x900, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') close(r0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000180)=""/149, 0x95}], 0x2) 23:29:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x900, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x9, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:29:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xa00, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x5, @multicast}, 0x10) 23:29:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:29:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xf0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:29:52 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001080)='system.posix_acl_access\x00', &(0x7f00000010c0)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee00}], {0x4, 0x2}, [{0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x5}, {0x20, 0x1}}, 0x34, 0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x7c00}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$hidraw(r1, &(0x7f0000000080)=""/4096, 0x1000) 23:29:52 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 988.216508] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 988.221604] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 988.228923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:29:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x7, @multicast}, 0x10) [ 988.235143] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 988.236290] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xb00, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:29:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 988.303980] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:29:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x1020, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 988.304570] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 988.316303] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 988.319180] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x9, @multicast}, 0x10) 23:29:52 executing program 6: setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}) r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00f5de08c5e29372dd4b0b6421fa9eb4e4b85ea93a41c8c7eec896839cce4dd7254450909e9d0534dfe717e9bc70bec78856248923f199e9ff6f881b81071866321cec5730301a6e46dc92b3af71"]) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7750646e6f3d4a120e1a9b7f0d2a9a186380c7018d288668af19f78c182a47c6d4a12d1b42112180db39af25af2bab6108b06d4d03d6fed8953ff296ae218c8bb7de0fe8f6ef64f2895daa20cda3db27a978e0f29e3c2d0e1593f9e03a755fedfbe75d408cfa3206390730d237922710cf20c251c2eee66170884a699739a87683c4848a", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3ff, 0x8000) r6 = socket$inet(0x2, 0x80000, 0x7) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80000) r8 = perf_event_open$cgroup(&(0x7f0000001340)={0x1, 0x80, 0x8, 0x40, 0x1, 0x0, 0x0, 0xb9, 0x80110, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000001300), 0x2}, 0x2044, 0xaf3, 0x9, 0x4, 0x3336, 0x5, 0x1, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r9 = getpid() pidfd_open(r9, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r10, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000013c0)=0x0) r12 = accept(r0, 0x0, &(0x7f0000001400)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="bc986d19c89c651fd9361782801bd6269ce68cf56d54833c25843ac75fe87cc030d66c2415349df26ced006a180a", 0x2e}, {&(0x7f0000000080)="8bea2209ae79012e63829b47a17479dd7f5c4a27ea75402aa2ee82ed95032ab0e85ff340d005049cb8e15505ca0920bfa66cfcdec0d680c205d736afb6ce0652af322c33d80dc9e81624b4fddf24abd075d0e0e60f4b188be8652ee58133a02d3281", 0x62}, {&(0x7f0000000300)="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", 0x1000}], 0x3, &(0x7f0000001440)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r0, r4, r5, r6, r7, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r12, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xd0, 0x4c}, 0x4000) 23:29:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 988.400856] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 988.403329] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:29:52 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 988.414770] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 988.417829] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:03 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010071039fd8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fcntl$addseals(r1, 0x409, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0xfffd, @empty}, {0x6, @random}, 0xe, {0x2, 0x0, @private=0xa010102}, 'veth1_to_bond\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x64, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'tunl0\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000002b40)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x10, {0x2, 0x4e23, @private=0xa010101}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000500)=""/186, 0xba}], 0x7, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002780)=""/255, 0xff}, {&(0x7f0000002880)=""/169, 0xa9}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x2, 0x40, 0x0) connect$inet6(r5, &(0x7f0000002b00)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = getpid() r8 = pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) sendmmsg$inet6(r3, &(0x7f0000004640)=[{{&(0x7f0000000640)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x890) getsockname(r3, &(0x7f0000000140)=@llc, &(0x7f00000001c0)=0x80) accept(r2, &(0x7f0000002bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002c40)=0x80) 23:30:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x1008, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:30:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x10, @multicast}, 0x10) 23:30:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2010, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:03 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:30:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xa00, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x200}, {}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 999.732238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:30:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x10, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 999.780837] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 999.789973] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:03 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(r1, r0, 0x0, 0xffffffff000) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$getflags(0xffffffffffffffff, 0x408) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c000, 0x0) sendfile(r4, r5, 0x0, 0x68e146a1) 23:30:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x17, @multicast}, 0x10) 23:30:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x1020, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:30:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x4000}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 999.889891] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 999.896452] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 999.908511] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 999.919097] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x300, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x700, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x21, @multicast}, 0x10) 23:30:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xf000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:30:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x810, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1000.061478] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1000.070655] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:04 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1000.119168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:30:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x900, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:16 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x10) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c653020747275737465642e6f7665726c61792e6e6c696e6b0020747275737465642e6f7665726c61792e6e6c696e6b0020285e5c282920747275737465642e6f7665726c61792e6e6c696e6b000ae88f5d02d6c2b4753a64d791a46d44dee813e7ecbb30f921361f19032352a20c352b9234e900eefef81ffb0a65217fe3dc1add8a9e0897cefb9de30900000000000000bc1b556139b07d15ed164d92672a2506db6ff9e8dce53bda6e19c286aacae1d3b51360665b26cc97fac125404c28474361f47980154f961ce4101b81d1aa29fe32c4439663f956e4bab154edf0b9534d1e912cc3"], 0xed) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xa8) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 23:30:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x4000}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:30:16 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xb00, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa00, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x80000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:16 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x26, @multicast}, 0x10) 23:30:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2010, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:30:16 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1012.783609] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1012.793483] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1012.796515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.808402] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1012.813578] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xf0ffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:16 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x2) [ 1012.905142] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1012.908308] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:16 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) dup3(r1, r4, 0x80000) truncate(&(0x7f0000000040)='./file0\x00', 0x2010000) 23:30:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x4000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1012.950655] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1012.956385] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb00, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:30:17 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x3) 23:30:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xc408, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1013.128109] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1013.134797] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1013.153370] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1013.159378] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1023.444867] Bluetooth: hci3: command 0x0406 tx timeout 23:30:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1008, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:29 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:30:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x4) 23:30:29 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xcb08, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:30:29 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:30:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x1008, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:29 executing program 6: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd29, 0x5, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4008080) unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) unshare(0xa020200) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r5, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x8}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) pidfd_open(r8, 0x0) r9 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x434, 0x3f3, 0x209, 0x70bd2a, 0x25dfdbfc, {0x3, 0x2, 0x26, [0x1f, 0x2, 0x8b, 0x0, 0x3, 0x63cf, 0x9, 0x2, 0x7fffffff, 0xfff, 0x1e71, 0x2, 0xc6a6, 0x7, 0x5, 0x0, 0x40, 0xeec3, 0x1000, 0x7ff, 0x5, 0xffff, 0x9, 0x0, 0x6, 0x4, 0xfffffff7, 0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x4bf6, 0x0, 0x8, 0x7, 0x800, 0x3f, 0x6, 0x5, 0x1f, 0x5, 0x400, 0x6, 0x81, 0x65, 0x1f, 0x33, 0x3, 0x401, 0x10001, 0x1, 0x1f, 0xffff35a8, 0x1, 0x4, 0x8, 0x71, 0x3, 0x80, 0x5a8e, 0x9, 0xc9000000, 0x31], [0x5, 0x793, 0x3, 0x10000, 0x400, 0x3, 0x3, 0x80000000, 0x13a, 0x40, 0x4, 0x6, 0x4, 0xffffffff, 0x4, 0x8, 0x741, 0x5, 0x1d, 0x7fffffff, 0x9c, 0x0, 0x2, 0x9, 0xb4, 0xa00c, 0xbaf5, 0x5, 0x1000, 0x3, 0xfff, 0xb2, 0x7, 0x1000, 0x3, 0x5, 0x80, 0x80000000, 0x1, 0x8, 0x7fffffff, 0x10000, 0x7, 0xf40b, 0x203, 0x81, 0x59, 0x4, 0x3, 0x9, 0x200, 0x2, 0xfff, 0x1, 0x3, 0x695e, 0x8, 0x1, 0x20, 0x6, 0x3f3, 0x2, 0x592], [0x200, 0x2, 0x5, 0x80000001, 0x3f, 0xa8e, 0x7, 0x0, 0xff, 0x8, 0x100, 0x401, 0x9, 0x80, 0x8, 0x7, 0x4, 0x3, 0x800, 0x80000001, 0x3ff, 0x1, 0x7f, 0x5, 0x1ff, 0x6, 0x9, 0x4, 0x9b6, 0x8001, 0x0, 0x9, 0x7, 0x100, 0x80000000, 0x5, 0x9, 0x6, 0x3, 0x8, 0x8, 0x80000001, 0x5, 0x8001, 0xfffffffa, 0x400, 0x8, 0x8, 0x7, 0x80000000, 0x8, 0x7, 0x2, 0x1000, 0x1fc000, 0x0, 0x20, 0x200, 0x8, 0x7, 0x1, 0x80000000, 0x3f7d027c, 0x7ff], [0x0, 0x4, 0xb8f, 0x86b, 0x1000, 0x8001, 0x7, 0x5, 0x5, 0xae, 0x47b, 0x6f30, 0x9, 0x2, 0x4, 0x2, 0x20000, 0x7fff, 0x6, 0x4, 0x80, 0x1ff, 0x400, 0x81, 0x7, 0x1ff, 0x6, 0x1, 0x8, 0x5, 0x78b, 0x7fffffff, 0x12, 0x3, 0x100, 0x6, 0x8, 0x80000000, 0xfffffff7, 0x8ee, 0xfff, 0xe1, 0x1f, 0x5, 0x8001, 0x1000, 0x89, 0x5, 0x7ff, 0x2, 0x2, 0xab5, 0x87, 0x1, 0x3, 0x5, 0x80000000, 0x8, 0xfffffff7, 0x80000001, 0x400, 0x7, 0x47, 0x6], 0x11, ['@\x00', '$#\x00', '\x00', '^&(\x00', '^%&#\x00', '/\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000010) unshare(0x66060080) [ 1025.847626] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1025.855502] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1025.859561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.876055] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1025.883743] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x1020, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:38 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:30:38 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40c03, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 23:30:38 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x5) 23:30:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1020, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, 0x0, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:30:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1034.366143] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1034.367580] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:38 executing program 6: syz_io_uring_setup(0x4383, &(0x7f00000002c0)={0x0, 0x753b, 0x8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) io_uring_setup(0x17be, &(0x7f0000000180)={0x0, 0x26c3, 0x0, 0x1, 0x26c, 0x0, r0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) pidfd_open(r3, 0x0) 23:30:38 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x6) [ 1034.455800] 9pnet_virtio: no channels available for device [ 1034.461386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.463884] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1034.465983] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x80000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1034.481416] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:30:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1034.483791] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1034.490512] 9pnet_virtio: no channels available for device 23:30:38 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x7) [ 1034.553264] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1034.556463] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1034.564803] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1034.566851] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xe0ffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:30:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:38 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x8) [ 1034.650000] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1034.654018] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1034.667100] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:30:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1034.675484] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1034.713209] 9pnet_virtio: no channels available for device [ 1034.718455] 9pnet_virtio: no channels available for device [ 1034.725892] audit: type=1326 audit(1754609438.706:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8915 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb74efe1b19 code=0x0 23:30:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2010, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2010, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x9) 23:30:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, 0x0, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:30:48 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:30:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1044.147461] 9pnet_virtio: no channels available for device [ 1044.148603] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:30:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1044.170205] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1044.184737] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1044.198281] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1044.204134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:30:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x4000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:48 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xa) 23:30:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1044.288153] 9pnet_virtio: no channels available for device 23:30:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1044.357756] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1044.361314] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1044.414910] 9pnet_virtio: no channels available for device 23:30:59 executing program 6: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 23:30:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xb) 23:30:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xedc0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, 0x0, &(0x7f00000005c0)={[0x8]}, 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:30:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x80000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xfffff000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:30:59 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:30:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1055.831101] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1055.836330] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1055.895847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:30:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xc) 23:30:59 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) chown(&(0x7f00000004c0)='./file0\x00', 0xee01, r3) chdir(&(0x7f0000000000)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="d5d23168c2a79ac8cd57d1b705dd93474677b6a9ff44fc545e56d98a41eafed489aa87583cfc5464c733a0ce76e5889e8371b9511f80ba935a6aa4151a0e2ef6390f43dae9a8b3a0f9d7e30afa43ccdd64c04d58b49db4f3", 0x58, 0x8b79}, {&(0x7f00000001c0)="e04793627346385c94e2418fc75e2fd2724a5d9617805aba711be0ea000000009e5ee719016abdd2eda38ba102ca9acf34a78dc55e70325acf99a4bf5eb1c9c269d60b997ba7fa48b22f6481ac91063700f9bf7acebbe9350aacdc7e2cfecf66c6b41379ecb57cbf6581a421fd66f9a048bc78e8c79eaeb2536171e7ef5133e6651d3ce274506257f377bbfa0e3bfb77d342783018f0fb063fe156fa1b2f2932186827398fcec5511b8632237ccbccef34247b9ced37ccb4749a3e7c28aed3050e2157", 0xc3, 0x3}, {&(0x7f00000002c0)="26120b70e03c001985b47bf720494362191988b29e1c4974a45162d6e31b7de876c6c7662b78d6bfc3e77f59fe031253a3822a2ea95d94ccbb0edf073ac380e66fea2d9ea60981fb45f8d786d29d47f334f76f78b7eb21de", 0x58, 0x2}], 0x2002000, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r4}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}, {@huge_never}], [{@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '%[\xb7'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x0, &(0x7f0000000040)=0x1) [ 1055.977242] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1055.982773] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 1055.991134] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1055.996026] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:30:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:30:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x80000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:31:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xd) 23:31:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:31:11 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:31:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:11 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) shutdown(r0, 0x1) [ 1067.281329] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1067.288003] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1067.318455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.321573] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1067.326245] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:31:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xe) [ 1067.467297] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1067.471483] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1067.493522] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:31:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) [ 1067.502202] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:31:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0xf) 23:31:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xf0ffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 1067.685381] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1067.709454] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1067.730329] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1067.735182] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1070.164907] Bluetooth: hci3: command 0x0406 tx timeout 23:31:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:31:20 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:31:20 executing program 6: mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x6d, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4$inet6(r0, &(0x7f0000001b00)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001b40)=0x1c, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001f80)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000002080)=0xe8) sendmmsg$inet(r1, &(0x7f0000002100)=[{{&(0x7f0000001b80)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001bc0)="820c912e3c88b00b1da5919c89c7acdaa4af42311520c2503d60fa4da38827bfe94f575b56395d1288975f06f11228a66ab0636d305793701847377d31cc3f1c546c8d25930b5b20a10fc2d219d822ef4051512fa6e958b6a5a6bf7a1316f17799e3d39a6b8194f8cf3e06c1d3fe5d2fb29889d331f821db67511f0fd5f0cba234f133c8af2fbbe7b23c52ef1fbcea97c2dad9a4c6077eac41790c8a64960f52d4e3", 0xa2}, {&(0x7f0000001c80)="2f21a242b60cae1c3a9eca2d680cec6c480a7f4ef03da0641d593fe454f992067392c0a704a0552e2b72012c4153b2d1a8b13989dbe64eef2ff46e9a584d0a37bd109d6db855ca31ad2104d61e727054c944e72e6c262f1017e53ee8e2bacba8edbf08dcfbf6bd8773a36cceb2a07df82aa8b1891a4677439539a541335534d027f94ff9ef1aa0c4a4e32f90c1", 0x8d}, {&(0x7f0000001d40)="55e9db1dd13f2ed1b5dabfcf79ce82fabdb064afe92a09351e4c3310107a42234a7ba4dd19f88a71c88a2e6975ad6a2450ec8a298c56c93e8ce8a64c7861e40af48cab4caf869a2346459697d3491393bbed5612a2a64954b0ed348c4d97f6a7c72fa46c8583414e8b9af933de9d2716aea045cae1f21f4b2da1c4c79e4d143b804bed0a4e111d8bfcd373784a7870d3c175afcb3024260584804b2b77850b2c3cc9c5662d5b07588ed12b5f35668f6ebd3b5078433120524f52d2a7c5745bdbf7a1c1e16b85462c0c071fb0ddca6fb8a1e365", 0xd3}, {&(0x7f0000001e40)="c407e1977bad59c05fc9d9aec0382152045755252c83e31e0feb0f942c368d5e0a1bc4fe8108b659801a9099185e8a5ca542965cba47ca625098c4dd12a026b03e6a2ac6e3614e623d8a2a66beac5fcf76263cc0cf3fa13eb7cbd45698496eb682511da22fdeaba7c28be6a029ea24d9fa51664bd2f6a4d3b81e68061443abb577ac4becaf47fb40796b272b069e4a1fd71694cd42a119722a0103e7d0b42f579d1a717bdb4b840e43116f6445eb8a5b05363da43ba79a38b896d0791a2b1110e41be92b850b011eaa68f59ddc01ea3ff917d027b53d5f40353be7247c02b91d7ac34226940538d92d96ec69", 0xec}], 0x4, &(0x7f00000020c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private=0xa010100}}}], 0x20}}], 0x1, 0x200000c0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002740), 0x40001, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65300a4f310746076177ecec08e7f0efbe3284e3f716baf97af121086c7a6275447bd530f3986700492e600a7c7dba0e607d0b883a202472997f2077f6d0c126304dd3a14422705077cccbd7410072c12d5ac991eab5a0a39f9b40"], 0x63) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x408000000000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = getpgid(0x0) fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r5}) r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000340)=""/29, 0x1d}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x8}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001680)=""/86, 0x56}, {&(0x7f0000001700)=""/134, 0x86}, {&(0x7f00000017c0)=""/2, 0x2}, {&(0x7f0000001800)=""/184, 0xb8}], 0x4, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x2, 0x2100, &(0x7f0000001a80)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000001ac0)={0x6, 'bridge_slave_0\x00', {0xdd2a}, 0x2}) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 23:31:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:20 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x17) 23:31:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:31:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1076.998645] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1077.016141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.019044] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:21 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x21) 23:31:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:21 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 1077.182333] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1077.191990] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1077.206051] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1077.207701] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x3000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:31 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:31:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0), 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:31:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:31 executing program 6: syz_80211_join_ibss(&(0x7f0000000600)='wlan0\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random='gSL', 0x3, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000100), 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffffffffffd58, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010000000000000000000c000000", @ANYRES32=r1, @ANYBLOB="04000080481d081ddc4e39103299da55c1913d2a2d07d0b4548e52649a33d9ba3bb71addab0c7ec755c1554f68afc51b190a2a4a3242baa21d57eacaa98f81df1f37e27385dfb290e5fa178bc2e46334df77e984369a1904c49e9e3595dc945cf4a70e084324e583da862d870bbc29157d3a371b8bdbf0c85355f563c7de521c5c96757da7c5eaacb9c865a5a0e450f8ef3294fdf98ed142549a921fe4f1b409"], 0x20}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3f}, 0x1c) 23:31:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x26) 23:31:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 1087.303433] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1087.308998] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1087.328300] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1087.338781] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1087.368574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:31:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:31:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x2f) 23:31:31 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="000000000080000000000000b0a342f88ff375a5ee0e6caadf97ee", @ANYRESHEX=r5, @ANYBLOB=',\x00']) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x40, 0x1, 0x0, 0x10001}, {0x5, 0x1f, 0x96, 0x80000000}, {0x7, 0xf2, 0x8, 0xfffffffb}, {0xfff, 0x8, 0xd4, 0x7}, {0xc0, 0x0, 0x1, 0x4}]}, 0x10) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) write$binfmt_elf64(r6, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0e004000000000000000080000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x4, 0x2b, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x5}, 0x400, 0x3, 0x10000, 0x2, 0x6, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r6, 0xa) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 23:31:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0), 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:31:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1087.564026] 9pnet_fd: Insufficient options for proto=fd [ 1087.565355] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1087.579523] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1087.586220] 9pnet_fd: Insufficient options for proto=fd [ 1087.601469] 9pnet_fd: Insufficient options for proto=fd 23:31:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:31:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1087.741440] 9pnet_fd: Insufficient options for proto=fd [ 1087.758005] 9pnet_fd: Insufficient options for proto=fd [ 1091.220915] wlan1: Trigger new scan to find an IBSS to join [ 1094.228850] wlan1: Trigger new scan to find an IBSS to join [ 1094.921020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:31:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0), 0x8) poll(&(0x7f0000000080)=[{r1}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x40}], 0x3, 0x40) 23:31:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt(r0, 0xfffffff7, 0x16d, &(0x7f00000003c0)="34c933ec704b1081d16583370acdcf3ff0b6649636fffe622facb7f43e07ed4aae924a4ef859e40d434abd6f8160ed61d6f2ea8824af5d7f6f6b7d90a4153e29d2c828ee9dd74a832c1905c7ea9b3f0c5ed10b1e7eeb254b6e094f3f04f9a516651e0aed1695439f208c65cf1968ae74d18e4607d804e382af9d328d213c4183fe5e2f775da5f71101909efe54020a187e5c0bc501b408d7f1c1584c6a2202a2ca635c4e73a60d63e705c5ff96cf26522b4c7f156f980a9dfdb4e0cb3417cb3e0d046d19f7af36d851765f748ca4da9971eb6cd98c9e74531fc4bb7a18f4cade58ca19d792a7e41087eb3d38230ee7a061a9d3bdbcea8bcd4ddbb608f0fada", 0xff) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r3, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="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", 0x21e}, {&(0x7f0000001100), 0xf00}, {0x0, 0x2}], 0x3}}], 0x1, 0x8000015) 23:31:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x7000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:41 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:31:41 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:41 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 23:31:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r1, 0x20, 0x0, 0xffff0001, 0x3, {{0x13, 0x4, 0x3, 0x3c, 0x4c, 0x66, 0x0, 0x8, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x33, 0x0, [{0x7, 0xd, "1514b30a3d0d11460d51b6"}, {0x4, 0xe, "714c7ab8b3cd0933a11c034e"}, {0x2, 0x12, "62fcb59454e1143a278c302b00ed5f31"}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', r1, 0x4, 0x1f, 0x0, 0x4, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, @private1, 0x80, 0x1, 0x1, 0x1f}}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001bc0)={'tunl0\x00', &(0x7f0000001ac0)={'ip_vti0\x00', r4, 0x80, 0x700, 0x4, 0x5, {{0x31, 0x4, 0x3, 0x2, 0xc4, 0x65, 0x0, 0x2, 0x4, 0x0, @broadcast, @private=0xa010100, {[@cipso={0x86, 0x59, 0x0, [{0x6, 0x8, "f1cf539b0d81"}, {0x7, 0x6, "a0910146"}, {0x1, 0xf, "044bb239e89571439db41de98d"}, {0x6, 0xd, "f864e185a6ca37c408e4ac"}, {0x2, 0x12, "13f3dd2ac9322303d98556237409e80f"}, {0x2, 0xc, "d35996fae49b702cab1c"}, {0x0, 0x8, "8c951a22e221"}, {0x6, 0x3, "11"}]}, @timestamp={0x44, 0x18, 0xfa, 0x0, 0x5, [0x5, 0x80000001, 0x9d7, 0x6, 0x10000]}, @rr={0x7, 0x13, 0xa2, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}, @noop, @generic={0x7, 0x7, "a9282688e5"}, @ssrr={0x89, 0x23, 0x6f, [@loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2, @local, @rand_addr=0x64010100]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001d40)={'syztnl2\x00', &(0x7f0000001cc0)={'erspan0\x00', r1, 0x1, 0x700, 0x379664a1, 0x0, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x66, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@end, @timestamp_addr={0x44, 0x34, 0xaf, 0x1, 0x9, [{@multicast2, 0x2}, {@remote, 0x7fff}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x40}, {@broadcast}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001f00)={'syztnl2\x00', &(0x7f0000001e80)={'syztnl2\x00', r1, 0x29, 0x83, 0x20, 0x8, 0x42, @mcast2, @local, 0x7800, 0x7800, 0x300, 0x10001}}) accept4$packet(r2, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001f80)=0x14, 0x800) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002840)={&(0x7f0000001fc0)={0x854, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x82d}}}]}}, {{0x8, 0x1, r4}, {0xdc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x254, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8000, 0x80, 0x5, 0x6}, {0x6f6, 0x7, 0x1f, 0x8}, {0x3f, 0x4, 0x40, 0x3}, {0x0, 0x3f, 0x2, 0x9}, {0x81, 0xf1, 0x7f, 0x6}, {0x6, 0x0, 0x8, 0xffff8000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4eb, 0x2, 0x0, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1a5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 23:31:41 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1097.348163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:31:41 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000200), 0xfffffda9) read$rfkill(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) read$rfkill(r1, &(0x7f0000000040), 0x8) read$rfkill(r0, 0x0, 0x0) [ 1097.384798] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1097.390415] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(0x0, 0x0, 0x40) 23:31:41 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xc4080000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:41 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xfffffffffffff000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 1097.459978] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:31:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1097.538261] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1097.554792] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:31:41 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2, 0x0) [ 1097.633106] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xcb080000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:50 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:50 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x8, 0x0) 23:31:50 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x420881, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x9) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:31:50 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:31:50 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x8000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:31:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000200), 0xfffffda9) read$rfkill(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) read$rfkill(r1, &(0x7f0000000040), 0x8) read$rfkill(r0, 0x0, 0x0) 23:31:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(0x0, 0x0, 0x40) 23:31:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1106.991750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:31:50 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xf0, 0x0) 23:31:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getflags(r2, 0x401) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:31:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xffffe000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:51 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(0x0, 0x0, 0x40) [ 1107.089695] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1107.096614] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:51 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x1020, 0x0) [ 1107.117469] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1107.121436] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:31:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:31:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) r5 = getpid() pidfd_open(r5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10) getpgid(0xffffffffffffffff) 23:31:51 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2000, 0x0) [ 1107.230935] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1107.236372] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1107.284863] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1107.291585] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(0x0, 0x0, 0x0) 23:32:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x8100000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:00 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:32:00 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x53c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x4e8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "97269ff96f6874995c0a25721ffef178c0fe57f26e31618af4d74070ff28079c"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x41fc}]}, {0x468, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3ff, @mcast2, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x2e4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x13}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x80}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f2003674d582ada8065bbd24e611ab3666726186fe37302d1ca7e24cc9b43266"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @empty, 0x80000001}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @remote, 0x6}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x53c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004040) r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r9 = getpid() r10 = pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000002a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7}}, './file0/file0\x00'}) setsockopt$packet_add_memb(r11, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6}, 0xb) 23:32:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000200), 0xfffffda9) read$rfkill(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) read$rfkill(r1, &(0x7f0000000040), 0x8) read$rfkill(r0, 0x0, 0x0) 23:32:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:32:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2010, 0x0) 23:32:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1116.160137] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1116.177358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.180382] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xedc0, 0x0) [ 1116.204617] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:32:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(0x0, 0x0, 0x0) [ 1116.219708] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:32:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x9000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xf000, 0x0) 23:32:00 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) [ 1116.379455] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1116.390028] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1116.393201] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1116.396059] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1116.418191] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1116.419517] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1116.424223] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1116.428462] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0xe0ffff00000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:32:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x80000, 0x0) 23:32:10 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xa000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:10 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:10 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = getpid() r7 = pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={0x0, @l2={0x1f, 0x6, @none, 0x2, 0x1}, @rc={0x1f, @none, 0x9}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth0_macvtap\x00', 0x7, 0x7, 0x6dcc}) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) 23:32:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$rfkill(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000200), 0xfffffda9) read$rfkill(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = getpid() r3 = pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) read$rfkill(r1, &(0x7f0000000040), 0x8) read$rfkill(r0, 0x0, 0x0) 23:32:10 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:32:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) poll(0x0, 0x0, 0x0) [ 1126.755344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.772527] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1126.784308] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:32:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xf0ffff, 0x0) 23:32:10 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:10 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) (fail_nth: 1) poll(0x0, 0x0, 0x40) 23:32:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1126.951900] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1126.959760] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x1000000, 0x0) [ 1127.011524] FAULT_INJECTION: forcing a failure. [ 1127.011524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.013444] CPU: 0 UID: 0 PID: 9369 Comm: syz-executor.1 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 1127.013477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1127.013490] Call Trace: [ 1127.013500] [ 1127.013511] dump_stack_lvl+0xfa/0x120 [ 1127.013566] should_fail_ex+0x4d7/0x5e0 [ 1127.013623] _copy_from_user+0x30/0xd0 [ 1127.013685] get_timespec64+0x78/0x190 [ 1127.013722] ? __pfx_get_timespec64+0x10/0x10 [ 1127.013759] ? __fget_files+0x20d/0x3b0 [ 1127.013823] __x64_sys_ppoll+0x14d/0x2a0 [ 1127.013862] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1127.013918] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1127.013952] ? ksys_write+0x1a3/0x240 [ 1127.013994] ? __pfx_ksys_write+0x10/0x10 [ 1127.014071] do_syscall_64+0xbf/0x360 [ 1127.014106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.014132] RIP: 0033:0x7f81d820db19 [ 1127.014152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1127.014174] RSP: 002b:00007f81d5783188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1127.014198] RAX: ffffffffffffffda RBX: 00007f81d8320f60 RCX: 00007f81d820db19 [ 1127.014214] RDX: 0000000020000580 RSI: 0000000000000006 RDI: 0000000020000500 [ 1127.014229] RBP: 00007f81d57831d0 R08: 0000000000000008 R09: 0000000000000000 [ 1127.014243] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1127.014258] R13: 00007ffe2ce4fecf R14: 00007f81d5783300 R15: 0000000000022000 [ 1127.014333] 23:32:11 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r9 = getpid() r10 = pidfd_open(r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 23:32:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x2000000, 0x0) 23:32:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:11 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1127.246376] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1127.255443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.261471] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1127.314926] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1127.319120] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:21 executing program 6: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="80596534cb4f86143e969d55b0c37755da3ed05553dcd6bf47babdbd8bdb6b74b0f9491736ca2557980548cb74f2dfdf687440029be33829e0b8e7b8ba2eff088b6e5ff1cf308606387a2cddba300553d80dada6a91841649107e64cb65cac6a1da1580619ab2f98986d53b62f3d6545e838ae97ac97deb57e1287468a44a791262df4d874f2402eaf15514bdbd84c2eea191844de3b3b51958770f1949c436fd8d34c45e6c0c1cd9fd651f470b42e8db4fc36845f70e824", 0xb8}, {&(0x7f00000003c0)="8e7a932ca7fa964eb7ee5f0438bb8d17096fc8099767cf5419c2855fff9d9013fc61e17bc272b6901f55a4e00121db4b7f6e73e757da6ed637a975650e84b2e060878d110d4db0d1a8af2f769510a67d7fc493f8dada7aa201d361ba76428d1dac76918a611cd832ceb08a250fa9dfd1d20e396b2b3ed24806c72342464542d826ab674cbe94a391c2019589f886f0b25f87311d26f97594aeb59a92095d4c09dc6875f70be51dc8cfe2d9488257c675adfb38524edc5f8c5ab859b5b5b1dbfd800a", 0xc2}], 0x2, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r1, r0, r2}}}], 0x20, 0x8080}, 0x4) rmdir(&(0x7f0000000000)='./file0/file0\x00') 23:32:21 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xb000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:21 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:32:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) (fail_nth: 2) poll(0x0, 0x0, 0x40) 23:32:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:21 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = dup2(r0, r2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@empty, @local, @rand_addr=' \x01\x00', 0x6, 0x7fff, 0x6, 0x100, 0x80, 0x1c20000, r4}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc}}}}, 0x28}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r11 = getpid() r12 = pidfd_open(r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r7, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x38}}, 0x20040000) 23:32:21 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x20000000, 0x0) 23:32:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:32:21 executing program 6: socketpair(0x2c, 0x3, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f000000afc0), 0x0, 0x0) syz_io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0xbc58, 0x8, 0x3, 0x2f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x9, 0x0, 0x40}, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = getpid() r5 = pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x6000, @fd=r3, 0x800, 0x0, 0x0, 0x8}, 0x1000) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f000000b180)={&(0x7f000000b0c0), 0xc, &(0x7f000000b140)={0x0}}, 0x0) open_by_handle_at(r5, &(0x7f00000002c0)=@ceph_nfs_confh={0x10, 0x2, {0x5}}, 0x40100) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) [ 1137.236111] FAULT_INJECTION: forcing a failure. [ 1137.236111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.237932] CPU: 0 UID: 0 PID: 9411 Comm: syz-executor.1 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 1137.237962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.237975] Call Trace: [ 1137.237984] [ 1137.237994] dump_stack_lvl+0xfa/0x120 [ 1137.238057] should_fail_ex+0x4d7/0x5e0 [ 1137.238111] _copy_from_user+0x30/0xd0 [ 1137.238160] set_user_sigmask+0xa3/0x2a0 [ 1137.238197] ? __pfx_set_user_sigmask+0x10/0x10 [ 1137.238242] ? poll_select_set_timeout+0xbf/0x140 [ 1137.238288] __x64_sys_ppoll+0x1b0/0x2a0 [ 1137.238330] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1137.238362] ? ksys_write+0x1a3/0x240 [ 1137.238400] ? __pfx_ksys_write+0x10/0x10 [ 1137.238470] do_syscall_64+0xbf/0x360 [ 1137.238503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.238526] RIP: 0033:0x7f81d820db19 [ 1137.238545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.238565] RSP: 002b:00007f81d5783188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1137.238587] RAX: ffffffffffffffda RBX: 00007f81d8320f60 RCX: 00007f81d820db19 [ 1137.238601] RDX: 0000000020000580 RSI: 0000000000000006 RDI: 0000000020000500 [ 1137.238615] RBP: 00007f81d57831d0 R08: 0000000000000008 R09: 0000000000000000 [ 1137.238628] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1137.238641] R13: 00007ffe2ce4fecf R14: 00007f81d5783300 R15: 0000000000022000 [ 1137.238716] 23:32:21 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000240)=""/80, &(0x7f0000000140)=0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) listen(r6, 0xffffffff) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote, 0x22, r1}) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 1137.308132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:32:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x400000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:32:21 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x20100000, 0x0) 23:32:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) (fail_nth: 3) poll(0x0, 0x0, 0x40) [ 1137.662165] FAULT_INJECTION: forcing a failure. [ 1137.662165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.663988] CPU: 0 UID: 0 PID: 9443 Comm: syz-executor.1 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 1137.664018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.664031] Call Trace: [ 1137.664040] [ 1137.664051] dump_stack_lvl+0xfa/0x120 [ 1137.664103] should_fail_ex+0x4d7/0x5e0 [ 1137.664155] _copy_from_user+0x30/0xd0 [ 1137.664205] do_sys_poll+0x1b3/0xd90 [ 1137.664249] ? perf_tp_event+0x807/0xe70 [ 1137.664306] ? __pfx_do_sys_poll+0x10/0x10 [ 1137.664338] ? __pfx_perf_tp_event+0x10/0x10 [ 1137.664424] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1137.664457] ? _kstrtoull+0x13e/0x200 [ 1137.664481] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1137.664533] ? perf_trace_lock_acquire+0x3c2/0x700 [ 1137.664619] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1137.664652] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1137.664742] ? perf_trace_lock_acquire+0x3c2/0x700 [ 1137.664781] ? perf_trace_lock+0xb5/0x5d0 [ 1137.664823] ? perf_trace_lock+0xb5/0x5d0 [ 1137.664865] ? __pfx_perf_trace_lock+0x10/0x10 [ 1137.664921] ? find_held_lock+0x2b/0x80 [ 1137.664956] ? set_user_sigmask+0x20b/0x2a0 [ 1137.664988] ? lock_release+0xc8/0x290 [ 1137.665019] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1137.665063] ? _raw_spin_unlock_irq+0x23/0x40 [ 1137.665097] ? set_user_sigmask+0x213/0x2a0 [ 1137.665130] ? __pfx_set_user_sigmask+0x10/0x10 [ 1137.665190] __x64_sys_ppoll+0x229/0x2a0 [ 1137.665233] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1137.665264] ? ksys_write+0x1a3/0x240 [ 1137.665302] ? __pfx_ksys_write+0x10/0x10 [ 1137.665372] do_syscall_64+0xbf/0x360 [ 1137.665404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.665428] RIP: 0033:0x7f81d820db19 [ 1137.665446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.665466] RSP: 002b:00007f81d5783188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1137.665488] RAX: ffffffffffffffda RBX: 00007f81d8320f60 RCX: 00007f81d820db19 [ 1137.665502] RDX: 0000000020000580 RSI: 0000000000000006 RDI: 0000000020000500 [ 1137.665516] RBP: 00007f81d57831d0 R08: 0000000000000008 R09: 0000000000000000 [ 1137.665529] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1137.665542] R13: 00007ffe2ce4fecf R14: 00007f81d5783300 R15: 0000000000022000 [ 1137.665609] [ 1139.935220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1139.939299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1139.942240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1139.949015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1139.952314] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1142.036811] Bluetooth: hci3: command tx timeout [ 1144.085782] Bluetooth: hci3: command tx timeout [ 1146.132778] Bluetooth: hci3: command tx timeout [ 1148.180786] Bluetooth: hci3: command tx timeout [ 1160.710737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.711852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.778423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.779524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.904378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:32:55 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 23:32:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x10000000, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x8cffffff, 0x0) 23:32:55 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = getpid() r6 = pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400, 0x7, 0x1c, 0x6, 0x9, 0xffff18ae, 0x100}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 23:32:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x500000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) 23:32:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {0x10000}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0xa4ea4d52e7e4bfdf) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000180)=ANY=[@ANYBLOB="00060000000000000000000000000000000000000000000000000000000000076709c0c662194fee2c2e01bbfae3a6b1a9e37c813ff646d39c07df2e88fa179e3b2ae79ba085a56ab8a735eaf8d88165cefc4b0e282ca5518c80f647432303ae04f143d7f712763e54de122f518c7dc0aa6b0d609b4fe2710632eec88d0a2d1b712062ee13cb7300000000000000000000000054037a82b2667be41736e9628040eb12fcee40057d4f6cf23b031998c995137d5bc406e71d73e1a25912ff727bd6658b00", @ANYRES32]) r1 = fork() ptrace(0x10, r1) socket$inet_tcp(0x2, 0x1, 0x0) wait4(r1, 0x0, 0x2, &(0x7f0000000440)) 23:32:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) pidfd_open(0x0, 0x0) pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000500)=[{}, {}, {}, {0xffffffffffffffff, 0x1211}, {r0}, {}], 0x6, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x8]}, 0x8) (fail_nth: 4) poll(0x0, 0x0, 0x40) 23:32:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1171.490287] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 23:32:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xc0ed0000, 0x0) [ 1171.530154] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:32:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1171.557121] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1171.572273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:32:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x600000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)) [ 1171.588493] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted [ 1171.632809] FAULT_INJECTION: forcing a failure. [ 1171.632809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.635039] CPU: 0 UID: 0 PID: 9922 Comm: syz-executor.1 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 1171.635070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1171.635084] Call Trace: [ 1171.635093] [ 1171.635103] dump_stack_lvl+0xfa/0x120 [ 1171.635156] should_fail_ex+0x4d7/0x5e0 [ 1171.635212] _copy_to_user+0x32/0xd0 [ 1171.635267] put_timespec64+0xb5/0x130 [ 1171.635304] ? __pfx_put_timespec64+0x10/0x10 [ 1171.635341] ? read_tsc+0x9/0x20 [ 1171.635370] ? ktime_get_ts64+0x216/0x360 [ 1171.635400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1171.635439] poll_select_finish+0x4a6/0x5b0 [ 1171.635484] ? __pfx_poll_select_finish+0x10/0x10 [ 1171.635524] ? _raw_spin_unlock_irq+0x23/0x40 [ 1171.635609] __x64_sys_ppoll+0x23d/0x2a0 [ 1171.635662] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1171.635696] ? ksys_write+0x1a3/0x240 [ 1171.635736] ? __pfx_ksys_write+0x10/0x10 [ 1171.635811] do_syscall_64+0xbf/0x360 [ 1171.635846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.635871] RIP: 0033:0x7f81d820db19 [ 1171.635890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1171.635912] RSP: 002b:00007f81d5783188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1171.635934] RAX: ffffffffffffffda RBX: 00007f81d8320f60 RCX: 00007f81d820db19 [ 1171.635950] RDX: 0000000020000580 RSI: 0000000000000006 RDI: 0000000020000500 [ 1171.635964] RBP: 00007f81d57831d0 R08: 0000000000000008 R09: 0000000000000000 [ 1171.635977] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1171.635991] R13: 00007ffe2ce4fecf R14: 00007f81d5783300 R15: 0000000000022000 [ 1171.636063] 23:32:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:32:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {0x10000}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0xa4ea4d52e7e4bfdf) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000180)=ANY=[@ANYBLOB="00060000000000000000000000000000000000000000000000000000000000076709c0c662194fee2c2e01bbfae3a6b1a9e37c813ff646d39c07df2e88fa179e3b2ae79ba085a56ab8a735eaf8d88165cefc4b0e282ca5518c80f647432303ae04f143d7f712763e54de122f518c7dc0aa6b0d609b4fe2710632eec88d0a2d1b712062ee13cb7300000000000000000000000054037a82b2667be41736e9628040eb12fcee40057d4f6cf23b031998c995137d5bc406e71d73e1a25912ff727bd6658b00", @ANYRES32]) r1 = fork() ptrace(0x10, r1) socket$inet_tcp(0x2, 0x1, 0x0) wait4(r1, 0x0, 0x2, &(0x7f0000000440)) [ 1171.721627] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted 23:32:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1171.778756] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1171.779585] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:32:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0xf6ffffff, 0x0) 23:32:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000001500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1265.109082] Bluetooth: hci3: command 0x0406 tx timeout [ 1336.822329] kworker/u10:7 (796) used greatest stack depth: 23968 bytes left VM DIAGNOSIS: 23:38:03 Registers: info registers vcpu 0 RAX=000000000084819b RBX=0000000000000000 RCX=ffffffff84ba0167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3654 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86438950 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b9ee9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e6000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe22d318010 CR3=0000000020110000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416c0a6e00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000058ca0f RBX=0000000000000001 RCX=ffffffff84ba0167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3654 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86438950 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b9ee9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e6000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe22bf502e8 CR3=0000000020110000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00d501fe016c6c6f502e726567616e61 XMM02=646e616320636578650e0a0100010101 XMM03=6169727420636578650b006574616469 XMM04=7a696d696e696d20636578650d006567 XMM05=650a006873616d7320636578650a0065 XMM06=20636578650900736465657320636578 XMM07=7220726f74756365786511007a7a7566 XMM08=636578650b006574616469646e616320 XMM09=696d20636578650d0065676169727420 XMM10=616d7320636578650a00657a696d696e XMM11=0900736465657320636578650a006873 XMM12=756365786511007a7a75662063657865 XMM13=78650800737472617473657220726f74 XMM14=6e696820636578650a006e6567206365 XMM15=00006c61746f7420636578650a007374