1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) getpid() shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x4040) 16:34:03 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, 0x0, 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:03 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:03 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r2 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x40001, 0x98) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet(0x2, 0x6, 0x6) eventfd(0x3) 16:34:03 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x4040) 16:34:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:03 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:16 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 16:34:16 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:16 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, 0x0, 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:16 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:16 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r2 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x40001, 0x98) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) eventfd(0x3) 16:34:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, 0x0, 0x4040) 16:34:16 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/12) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) 16:34:16 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:16 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) 16:34:16 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:16 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r2 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x40001, 0x98) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) eventfd(0x3) 16:34:16 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0/../file0/file0\x00'}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) 16:34:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:16 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) 16:34:29 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:29 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:29 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 16:34:29 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x40001, 0x98) eventfd(0x3) 16:34:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, 0x0, 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:29 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:29 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) eventfd(0x3) 16:34:29 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) 16:34:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) eventfd(0x3) 16:34:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) 16:34:42 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:42 executing program 5: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r2 = getpid() waitid(0x1, r2, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r3 = fork() r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r3, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:42 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x0) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:42 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0/../file0/file0\x00'}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4040) 16:34:42 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) eventfd(0x3) 16:34:42 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:42 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:55 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:55 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r2 = getpid() waitid(0x1, r2, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r3 = fork() r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r3, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:55 executing program 0: pipe2(&(0x7f0000000000), 0x4800) eventfd(0x3) 16:34:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x0) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 16:34:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:55 executing program 0: eventfd(0x3) 16:34:55 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/87) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000001c0)=""/105) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x1) r3 = pidfd_getfd(r0, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r3, 0x8000000) sendto$unix(0xffffffffffffffff, &(0x7f0000000500)="4e3e423348e2fae6dc4905fac1a660cbc5ce967ffa353c0a3b7b39621ee23983751cd50d4a8e0f5358748f17994c730a30f993d53485a166bf84c769334cbc1e39ab0b78793ca9a59ea5a540cef69826a1059fcf277abc58a9df9786c96a0c246c4f1becac5b608c5eea5b5b795badcfd75692658bbdbea756b16e8b9c323344d87140149adf3a613ddc7b246ebea9a64aff0670ff035eeb63add88ae88093f30d0505b938b8ef15cd78d4b5f0bec1b4613651f67c32facf9ef066ccb623d38287ed05dcca78fc30e883bf30d912a6c94b19a8b8569349df3f92e948e452ee195e593f749702db7bddc9e5cab88adc155292842cd893d4d7592d42a59bdffe0a68786f3b0972e4659d841fe8ba2b69b0c7f779d81fe93a78737760d10a53138c4c898908ba4e4c9a09ce035d47bcb17366964bc132d8f4884b1882859cadbccda0a94ba611e5f8c25a0b9be0d67f783d81ba28ad23cb215c9964fa64f414ddb06b150ffa0c25b972c17382d0c07c9c42fc4544645bca4493ad4e05bec99b3a17ab6dad1b29a9f642cace132ef619dd73a1b95b739c260d1b955b70453d92694ee4faa5d9b074aab985bce32168d7ac2c342bcfd044a2f23af74a539e29ff076f4f7ed1e54414db9541c04a1e86bcda9fff71d826e0ecdd615a1ecbc70c0224b4fc9e2ae425190101488e78bdd574257fc1fb451cc075cd500dbbcd0f4fe184ac0823a891b4d15af3458748031b3cff1d7871600370ca06b1bbfa6ddf343860244f608024accead93b42263b0a7780ccfdbf911ac91a0ba229298c789c3554e0ed75760a79e407acab1d6db27447eebec02f5a408922ffce3037bbeb0c73226c77cc4ee70901eb2fea59f5fbb0a54e0a37f029509304930f4edfbd6a0b3f900115fd1528ef26a1e9c073c659e0a3ca56a103f43e2a1ca10b6c79238477bb338171fac31d5af46cbacc03b9b3e3cd6b90b5383c9cc536ccd54981d43ac8c75fb187c50187b2ca42f502452a5cdfad6cfdec5e2e35ca303bb3246b04be651b900b311408572051a4d1b3dd5423985b6a86eb3020f29e8840464ae2118613e69683284c7b47ed4b08b9ac9e271becd1195e5e25a1a25c3aea1f8e3ab54fe26eebe870a7d4d2b7c6cfbef357b2b47f2da02ab3ef718d6b8f6aded269d6a470295926b281a6da9ae6d1b97eb78637f14a06ba0a15c83383a7317d4f7f47c7706438954647130ae7b77959a67226478db30e2eebef59d0e59cb96267506706a0e1ee02c2c080a4f577de33ac3f1591d5d646c67a8aa938466e7f269b58ac1024cc60a45145ce555c89a8c6ac163720ec7f4f0bad2475a55a1d1a26511bb9f905319862520627dd6f20ddf8fc71aed032828b8f75dc0b473457038dc9f2a116f6935ed7b4c73fd0c06994686015adf42ff2f2da16c6db421981336e376ad1a80ccee048c6958dbbf9d923d8a2192428138ea969c5d5397f820c7ea82e41c819abed480e563b43f5e399e43e2b92ecadaba018ebef8e2a32e1759cd560d00423849168efe4a68dc3eefb9f7f57c9f5b40bc271453676d372e1f7bbe2953b987b261984c74c449ed380a95665d5b3ff797b3066001c5c575a07981295194d50298b13c55324f3e194adc075e4b48d8b618e21aedbc263eb49cf0129f76d28a7a1d73ab7344be085131c4e1b1a43f91b1068137b20c3ab8657884c47d90e680133a40edbb6c7fc0b8ea7453cf48047076aae433bc0527b56cae1f2301cd8a9ebba0fd293a17c9b04fa7de630d401805c91bac0e9ffeba8f559fd616500e1839a15af538474c4e9d42636864c0f71f12ec565685f9580f32252f2c6be7d5a7643ecff7340212ec75cfc49d50170fd58aea7c718db245c74611e362f5d18a9204141c94bbb49fff7e55a94965750b2b503ac7eef18541015a92c4c2f41da617940099aa245a991a1beb0bdeaa15870bc47754c3f77e2fcedf6eb0e7ab8e4a09af3e1e86728d6b7e13f0f10d75715eccc01cf473b3e894296815d2408af584e9b320b9ad748615d793e7630a0caa8bee350a8fbdde4c14a042418ca5dcb5a899bb08b7490b8b177d6b67e0ef1a5ee5b24bf9ef6b23dc79621cce11b50b7a444e75da84c8c560e90e3205c42b025dc5bee3bb18056a90e3c25c35b68ed1cdc2cada0715e2b653b45b9fe41d39638111718b47684ee6f21994a8f3e3340ac9d1b2bea23f70dcaa1abb8d09173c0cfaaff0946867f8b02c60d3a0e91535d62cb739e6f953b15e08ffb8c553177da87cd2e47147144bc15c200db3a0edbc8049ebb945d007b6f37eee9adc1a3057ff7e3f385a16398440c1b7edb2140cd2c92df9a48c5f352943dce2e30e3da84e2b8e4778d48af9201431864e2242084bdbcb7e5f0ff8660a01b233fc06a6048b3780712345f3dce1c2c8ed830ec206dec935fd4475e86b270953115d8d7a4c220b3910e89153bbbdaa0c51ddf20ce062186bf3bbb5e3ab2bc1552bb87b66ab191456c31d058dbd9fb6818727c3cff6d6ca78305039002ec478ae4eec138ef9973f750d537be0894c94c28e6dc01869e2b6f3679285c68856095371d94c9368370452ce41296986732de2d2d0273b283b3ed9844dab35669033c7f5102247c779431645bc0202a561515dc28e0e64292ecdb6950c85cc3d4c920dabbe4f1608517c7768fda59c268cb04b8e21bf0c479b3fd525a376290e6d8652ae2dbc77b25cead802848f08d0c3dc89a429f4f1a09e20b5214c8cf01eb4d4b43004a3cb8b6ec0e6f6ce9ad6e7579043b38d8ecb68f8a9dd970624df9e013b5be3096f1aa0b0f35140c2bccaab63a63822f0cc3d61f7b15643c027afd92e4b158b64cde41955d37737b3d7a9575e14557f93cd4da6350e9940763ebe3b3225cc581b0e26d902805667665bc8bd0d108c4e912da033d64de80fc85c332a94d8ac3ffad4a00883409ca6b28b7432ac3283b58ea85d4973b149a1431cae324cd416f104d6eb672b9804986809c43ad020168a5245d8d6984605e11fc418e45cb505b962732c9e8cafdf282153ee1a233faba254b2334b121b4d2a27a0e40d0337ca061b2ad7495396eec5ba0cde21be99e6254f16d1ac8889a112e97ee3b92fccdb416a7c0c6f491bf3999393a13cdf11f5c1e3a491880bb7ac9f3c9fa18ddad67edd90a7be236876e816f11c5d63dec3f248961d7ced69deedf5cd21f1f3ef40881c302e758c8c86f8ce174a20cfee5fd264aea6d62ff42052d746ac3eb4581147528639d2d9deb57fbc856a1b9ffdfa134f67dd1505a2377e9adc4ec7f0c76121eadc0c79c33f0f5ed0a01c18f1d4a129893206b40320ee33575b9636a0f3015e3c31f453775dca7567a6d1d94de8cd5b3eb5d4ccc132a4c954d1683788b27f6f029de13f70150e53595c004d64791e4472797bdc0e54801771ade7dc442477b085eee71a6a5065e98f539027573ae50a9a2e575312882c1a3c71ef726e54868ff74897dd4aef9fce5d15eb24440b8d8f6950cfa63a3d00b0ff1f5fd0edceedbcb311faace3048320aa44d9c52e3d26649f9d9cef5a623d9c8c8d1a2acbea31711f040dd0d8d842e07185d5f2b5cf78e5b21122ce13ac42a8455b0868d4a4a390d607793244efda1721711d9395449cc4d4e151a2cb82bb4d85e165081cdb58de1cbf817dc6f8f4784057a7fa2a96008311b6196d717496531ef750f6463dea2c8e5716200ad69826e72f04ed95b44981f20a7f9b8985f60aeba5650c0b73b426764cdbadce42880b2faf9a2645993fce00303e1515befe1d1cb6902ae13d255e3e471a83604ef026c9fd22198877a72d3f2d4c308d1c99062dab01c3732b50d70f7019be7fab8cc58345352a438f6b10e23d216d7590f580ed212dcf80fa1046f2dc7c6d33ea1c28d1530d7af42d7a8f10664446bffe52ad474a28e6c865072d7fca75e642f0510257986b3ce965d057c035d6ba59617955caf0688f2181aaba4f2f1e92172e9fdc3bd8fd4448e69965737b99013dfc9c7a54c013ab6e6bc27a547ca0750a426ad23ea13ec8e6dfcda0743a3b6fe7a4e6ea4562489ae96a1f1cb4402ba5faf86c646a691820e5a60f4eda342d46142b29706d936db846a6fb9b072bdc58793f04b38f56c0050a0587048e5362e15006c023e87e778aeda6ba2aaa0caa0154251ccfbe38ce82ff8267af9145fc1da44e8248816033c20d8ad5e45e3481c38e579100acff844fab41868f8ce33cdbf02375e196eb7dbeddc3fe6eaec37c928284e44fddee6f92499f3f83bf6db98ac2b3018ed6b92f519e6bdd007ef880af9624e8e201d8718020ae70a25bd61e876e6f0b8d73470bd9916ff4c89f571320aaf830d76ab614ad9aae11140a1fd559cf17df9efb9ba9eb1335a24d776e287c06c11c46bf2d8641e894cf6217f16bfad747def65f59cc0ab21851eda5820a14472a85586f1b54fe6a624fd22ed70e3f523da0b2c072d2edc58836e65654677136ef424ae18a2603fce26ad07c59cea7db358c8a94f55edde062e4a3c410d128d9447f017a8f78a121ed2acce0c47a1c75eb783bc60f2e14bfe9aff506a86506f43c756977864ec976560cc7eedecf0b4984627da6120c8fc36068fddc68900b1e782fa4913112c2581c91ff9eecd8925081a200056d1850d06efd7ecbdaf019d9b3d9cb8bf8d3b8c946981d2eca290ecb302b168e029ce5ac71857f1374959d33fb348ed3a9714e68fc7fd605c0c489b1a0781ef9988694a8abf403f1868c0943eb3fb0f209159d188dc5b3b3bbb4e87b596e6490e7134ea7f0c14f2d8cd8aeea2849358fca95b66f836f12237b3c6375c17f4f48d7ab7580151c9f014c69256ef219dc8abdb71ad35eeea961ef56a46ed26a960bf535946fbf5cbf4c1cced8e94607cb2cd3bd45bdad0358ddff7fb9cdc02ec563c32a620b410ade0c0c6a7515e250e3a4df3013bace38892a34ee7a311dace2fce43e946f71f113f3ca37484a4d37f2d3661716954a64f6503e49e112df9c172208bbff6913463c0c49ee2cb76d506139d3ef17d2371e8ec3c7f795685bfb5b2bbfbae0439e2bf751af8eb7665d30d8151252482633001162504f85c1a8dccb7a50684e11676a2d9a8252470d96ef550c682acf33e72fb471ab114fbd447a166a215bb409f68d43ac346a4b0c643c703d026834fd17931c264b14461df6b6bd7c9aa32725644c0e69369ce75ca598e9065c844523912926bed7a5383d4d91147734a8ca5075ab6518896b5d658a1829c491361e293f2174b1b817a51fc83d6625f9dd705d0e9ba8dbe713c6e352189ee0b8c194c45b1339b51b4cbcb2b594105677ccf59cf0b48ede91a6256a74678e6c23e83b77da416e6cc172127ed7d8cce73244f77879ee28062267232691e016a79ba9dded94e027008766641830a8177068e8af01812c253729cdecd2ddc573e1798831364f6619d620bbd73bc8dbd6ea22a216a88e30dc79f35b6dfef14d6efc8c13c06ba367091a7215a3c8af97f5c324b9fa3e3165fa8e62c4eb029710060e3dda24fba213bc0ed542367b387aca72d9e714a68396a690bbe9484252848967eee90c23a43b52cf2ebf4d87d4c392818cf12cf118951bad4be0e9247dfe831d8dd2c05815295f21cd71e7b7d4efa911d7e0dd0eea8e4f01896602ce69fecc30bbaf4df4cc21bf23184b898762a261758b2d41aae1fa14851f40baaecc921fce0d919f538b9a167d343614f7d40b7383a2b857fbd4998e8b3b995b5886a3049fa47701a57bd2cb2885db34e3555644d9d1feb51ef873ec34", 0x1000, 0x1, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) 16:34:55 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:55 executing program 2: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:34:56 executing program 0: eventfd(0x0) 16:34:56 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x0) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:34:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) 16:34:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) 16:34:56 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:34:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r2 = getpid() waitid(0x1, r2, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r3 = fork() r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r3, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:09 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:35:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) 16:35:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) getpid() shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:35:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:35:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:09 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0x3f) 16:35:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:10 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:35:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 16:35:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 16:35:23 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:23 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:23 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0x3f) 16:35:23 executing program 7: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:35:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:23 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0x3f) 16:35:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 16:35:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:37 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 16:35:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:37 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(0x0, r1) 16:35:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:37 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) 16:35:37 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) 16:35:37 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:35:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:37 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) 16:35:37 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 16:35:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(0x0, r1) 16:35:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:37 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:51 executing program 0: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000400)=0x3f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 16:35:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:51 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:35:51 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) 16:35:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(0x0, r1) 16:35:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:51 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/87) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000001c0)=""/105) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x1) r4 = pidfd_getfd(r0, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r4, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000300)=""/161) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) openat$cgroup_type(r5, &(0x7f0000000400), 0x2, 0x0) sendto$unix(r5, &(0x7f0000000500)="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", 0x1000, 0x1, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) 16:35:51 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) 16:35:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 16:35:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 16:35:51 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:35:51 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 16:35:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:35:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:35:51 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:36:05 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/87) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000001c0)=""/105) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x1) r4 = pidfd_getfd(r0, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r4, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000300)=""/161) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) r8 = openat$cgroup_type(r5, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0x1f, 0x4}}, './file0\x00'}) sendto$unix(r5, &(0x7f0000000500)="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", 0x1000, 0x1, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) 16:36:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:05 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:05 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:36:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 16:36:05 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:36:05 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:36:05 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) symlinkat(&(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00') 16:36:05 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:36:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 16:36:05 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/87) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000001c0)=""/105) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x1) r4 = pidfd_getfd(r0, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r4, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000300)=""/161) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) r8 = openat$cgroup_type(r5, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0x1f, 0x4}}, './file0\x00'}) sendto$unix(r5, &(0x7f0000000500)="4e3e423348e2fae6dc4905fac1a660cbc5ce967ffa353c0a3b7b39621ee23983751cd50d4a8e0f5358748f17994c730a30f993d53485a166bf84c769334cbc1e39ab0b78793ca9a59ea5a540cef69826a1059fcf277abc58a9df9786c96a0c246c4f1becac5b608c5eea5b5b795badcfd75692658bbdbea756b16e8b9c323344d87140149adf3a613ddc7b246ebea9a64aff0670ff035eeb63add88ae88093f30d0505b938b8ef15cd78d4b5f0bec1b4613651f67c32facf9ef066ccb623d38287ed05dcca78fc30e883bf30d912a6c94b19a8b8569349df3f92e948e452ee195e593f749702db7bddc9e5cab88adc155292842cd893d4d7592d42a59bdffe0a68786f3b0972e4659d841fe8ba2b69b0c7f779d81fe93a78737760d10a53138c4c898908ba4e4c9a09ce035d47bcb17366964bc132d8f4884b1882859cadbccda0a94ba611e5f8c25a0b9be0d67f783d81ba28ad23cb215c9964fa64f414ddb06b150ffa0c25b972c17382d0c07c9c42fc4544645bca4493ad4e05bec99b3a17ab6dad1b29a9f642cace132ef619dd73a1b95b739c260d1b955b70453d92694ee4faa5d9b074aab985bce32168d7ac2c342bcfd044a2f23af74a539e29ff076f4f7ed1e54414db9541c04a1e86bcda9fff71d826e0ecdd615a1ecbc70c0224b4fc9e2ae425190101488e78bdd574257fc1fb451cc075cd500dbbcd0f4fe184ac0823a891b4d15af3458748031b3cff1d7871600370ca06b1bbfa6ddf343860244f608024accead93b42263b0a7780ccfdbf911ac91a0ba229298c789c3554e0ed75760a79e407acab1d6db27447eebec02f5a408922ffce3037bbeb0c73226c77cc4ee70901eb2fea59f5fbb0a54e0a37f029509304930f4edfbd6a0b3f900115fd1528ef26a1e9c073c659e0a3ca56a103f43e2a1ca10b6c79238477bb338171fac31d5af46cbacc03b9b3e3cd6b90b5383c9cc536ccd54981d43ac8c75fb187c50187b2ca42f502452a5cdfad6cfdec5e2e35ca303bb3246b04be651b900b311408572051a4d1b3dd5423985b6a86eb3020f29e8840464ae2118613e69683284c7b47ed4b08b9ac9e271becd1195e5e25a1a25c3aea1f8e3ab54fe26eebe870a7d4d2b7c6cfbef357b2b47f2da02ab3ef718d6b8f6aded269d6a470295926b281a6da9ae6d1b97eb78637f14a06ba0a15c83383a7317d4f7f47c7706438954647130ae7b77959a67226478db30e2eebef59d0e59cb96267506706a0e1ee02c2c080a4f577de33ac3f1591d5d646c67a8aa938466e7f269b58ac1024cc60a45145ce555c89a8c6ac163720ec7f4f0bad2475a55a1d1a26511bb9f905319862520627dd6f20ddf8fc71aed032828b8f75dc0b473457038dc9f2a116f6935ed7b4c73fd0c06994686015adf42ff2f2da16c6db421981336e376ad1a80ccee048c6958dbbf9d923d8a2192428138ea969c5d5397f820c7ea82e41c819abed480e563b43f5e399e43e2b92ecadaba018ebef8e2a32e1759cd560d00423849168efe4a68dc3eefb9f7f57c9f5b40bc271453676d372e1f7bbe2953b987b261984c74c449ed380a95665d5b3ff797b3066001c5c575a07981295194d50298b13c55324f3e194adc075e4b48d8b618e21aedbc263eb49cf0129f76d28a7a1d73ab7344be085131c4e1b1a43f91b1068137b20c3ab8657884c47d90e680133a40edbb6c7fc0b8ea7453cf48047076aae433bc0527b56cae1f2301cd8a9ebba0fd293a17c9b04fa7de630d401805c91bac0e9ffeba8f559fd616500e1839a15af538474c4e9d42636864c0f71f12ec565685f9580f32252f2c6be7d5a7643ecff7340212ec75cfc49d50170fd58aea7c718db245c74611e362f5d18a9204141c94bbb49fff7e55a94965750b2b503ac7eef18541015a92c4c2f41da617940099aa245a991a1beb0bdeaa15870bc47754c3f77e2fcedf6eb0e7ab8e4a09af3e1e86728d6b7e13f0f10d75715eccc01cf473b3e894296815d2408af584e9b320b9ad748615d793e7630a0caa8bee350a8fbdde4c14a042418ca5dcb5a899bb08b7490b8b177d6b67e0ef1a5ee5b24bf9ef6b23dc79621cce11b50b7a444e75da84c8c560e90e3205c42b025dc5bee3bb18056a90e3c25c35b68ed1cdc2cada0715e2b653b45b9fe41d39638111718b47684ee6f21994a8f3e3340ac9d1b2bea23f70dcaa1abb8d09173c0cfaaff0946867f8b02c60d3a0e91535d62cb739e6f953b15e08ffb8c553177da87cd2e47147144bc15c200db3a0edbc8049ebb945d007b6f37eee9adc1a3057ff7e3f385a16398440c1b7edb2140cd2c92df9a48c5f352943dce2e30e3da84e2b8e4778d48af9201431864e2242084bdbcb7e5f0ff8660a01b233fc06a6048b3780712345f3dce1c2c8ed830ec206dec935fd4475e86b270953115d8d7a4c220b3910e89153bbbdaa0c51ddf20ce062186bf3bbb5e3ab2bc1552bb87b66ab191456c31d058dbd9fb6818727c3cff6d6ca78305039002ec478ae4eec138ef9973f750d537be0894c94c28e6dc01869e2b6f3679285c68856095371d94c9368370452ce41296986732de2d2d0273b283b3ed9844dab35669033c7f5102247c779431645bc0202a561515dc28e0e64292ecdb6950c85cc3d4c920dabbe4f1608517c7768fda59c268cb04b8e21bf0c479b3fd525a376290e6d8652ae2dbc77b25cead802848f08d0c3dc89a429f4f1a09e20b5214c8cf01eb4d4b43004a3cb8b6ec0e6f6ce9ad6e7579043b38d8ecb68f8a9dd970624df9e013b5be3096f1aa0b0f35140c2bccaab63a63822f0cc3d61f7b15643c027afd92e4b158b64cde41955d37737b3d7a9575e14557f93cd4da6350e9940763ebe3b3225cc581b0e26d902805667665bc8bd0d108c4e912da033d64de80fc85c332a94d8ac3ffad4a00883409ca6b28b7432ac3283b58ea85d4973b149a1431cae324cd416f104d6eb672b9804986809c43ad020168a5245d8d6984605e11fc418e45cb505b962732c9e8cafdf282153ee1a233faba254b2334b121b4d2a27a0e40d0337ca061b2ad7495396eec5ba0cde21be99e6254f16d1ac8889a112e97ee3b92fccdb416a7c0c6f491bf3999393a13cdf11f5c1e3a491880bb7ac9f3c9fa18ddad67edd90a7be236876e816f11c5d63dec3f248961d7ced69deedf5cd21f1f3ef40881c302e758c8c86f8ce174a20cfee5fd264aea6d62ff42052d746ac3eb4581147528639d2d9deb57fbc856a1b9ffdfa134f67dd1505a2377e9adc4ec7f0c76121eadc0c79c33f0f5ed0a01c18f1d4a129893206b40320ee33575b9636a0f3015e3c31f453775dca7567a6d1d94de8cd5b3eb5d4ccc132a4c954d1683788b27f6f029de13f70150e53595c004d64791e4472797bdc0e54801771ade7dc442477b085eee71a6a5065e98f539027573ae50a9a2e575312882c1a3c71ef726e54868ff74897dd4aef9fce5d15eb24440b8d8f6950cfa63a3d00b0ff1f5fd0edceedbcb311faace3048320aa44d9c52e3d26649f9d9cef5a623d9c8c8d1a2acbea31711f040dd0d8d842e07185d5f2b5cf78e5b21122ce13ac42a8455b0868d4a4a390d607793244efda1721711d9395449cc4d4e151a2cb82bb4d85e165081cdb58de1cbf817dc6f8f4784057a7fa2a96008311b6196d717496531ef750f6463dea2c8e5716200ad69826e72f04ed95b44981f20a7f9b8985f60aeba5650c0b73b426764cdbadce42880b2faf9a2645993fce00303e1515befe1d1cb6902ae13d255e3e471a83604ef026c9fd22198877a72d3f2d4c308d1c99062dab01c3732b50d70f7019be7fab8cc58345352a438f6b10e23d216d7590f580ed212dcf80fa1046f2dc7c6d33ea1c28d1530d7af42d7a8f10664446bffe52ad474a28e6c865072d7fca75e642f0510257986b3ce965d057c035d6ba59617955caf0688f2181aaba4f2f1e92172e9fdc3bd8fd4448e69965737b99013dfc9c7a54c013ab6e6bc27a547ca0750a426ad23ea13ec8e6dfcda0743a3b6fe7a4e6ea4562489ae96a1f1cb4402ba5faf86c646a691820e5a60f4eda342d46142b29706d936db846a6fb9b072bdc58793f04b38f56c0050a0587048e5362e15006c023e87e778aeda6ba2aaa0caa0154251ccfbe38ce82ff8267af9145fc1da44e8248816033c20d8ad5e45e3481c38e579100acff844fab41868f8ce33cdbf02375e196eb7dbeddc3fe6eaec37c928284e44fddee6f92499f3f83bf6db98ac2b3018ed6b92f519e6bdd007ef880af9624e8e201d8718020ae70a25bd61e876e6f0b8d73470bd9916ff4c89f571320aaf830d76ab614ad9aae11140a1fd559cf17df9efb9ba9eb1335a24d776e287c06c11c46bf2d8641e894cf6217f16bfad747def65f59cc0ab21851eda5820a14472a85586f1b54fe6a624fd22ed70e3f523da0b2c072d2edc58836e65654677136ef424ae18a2603fce26ad07c59cea7db358c8a94f55edde062e4a3c410d128d9447f017a8f78a121ed2acce0c47a1c75eb783bc60f2e14bfe9aff506a86506f43c756977864ec976560cc7eedecf0b4984627da6120c8fc36068fddc68900b1e782fa4913112c2581c91ff9eecd8925081a200056d1850d06efd7ecbdaf019d9b3d9cb8bf8d3b8c946981d2eca290ecb302b168e029ce5ac71857f1374959d33fb348ed3a9714e68fc7fd605c0c489b1a0781ef9988694a8abf403f1868c0943eb3fb0f209159d188dc5b3b3bbb4e87b596e6490e7134ea7f0c14f2d8cd8aeea2849358fca95b66f836f12237b3c6375c17f4f48d7ab7580151c9f014c69256ef219dc8abdb71ad35eeea961ef56a46ed26a960bf535946fbf5cbf4c1cced8e94607cb2cd3bd45bdad0358ddff7fb9cdc02ec563c32a620b410ade0c0c6a7515e250e3a4df3013bace38892a34ee7a311dace2fce43e946f71f113f3ca37484a4d37f2d3661716954a64f6503e49e112df9c172208bbff6913463c0c49ee2cb76d506139d3ef17d2371e8ec3c7f795685bfb5b2bbfbae0439e2bf751af8eb7665d30d8151252482633001162504f85c1a8dccb7a50684e11676a2d9a8252470d96ef550c682acf33e72fb471ab114fbd447a166a215bb409f68d43ac346a4b0c643c703d026834fd17931c264b14461df6b6bd7c9aa32725644c0e69369ce75ca598e9065c844523912926bed7a5383d4d91147734a8ca5075ab6518896b5d658a1829c491361e293f2174b1b817a51fc83d6625f9dd705d0e9ba8dbe713c6e352189ee0b8c194c45b1339b51b4cbcb2b594105677ccf59cf0b48ede91a6256a74678e6c23e83b77da416e6cc172127ed7d8cce73244f77879ee28062267232691e016a79ba9dded94e027008766641830a8177068e8af01812c253729cdecd2ddc573e1798831364f6619d620bbd73bc8dbd6ea22a216a88e30dc79f35b6dfef14d6efc8c13c06ba367091a7215a3c8af97f5c324b9fa3e3165fa8e62c4eb029710060e3dda24fba213bc0ed542367b387aca72d9e714a68396a690bbe9484252848967eee90c23a43b52cf2ebf4d87d4c392818cf12cf118951bad4be0e9247dfe831d8dd2c05815295f21cd71e7b7d4efa911d7e0dd0eea8e4f01896602ce69fecc30bbaf4df4cc21bf23184b898762a261758b2d41aae1fa14851f40baaecc921fce0d919f538b9a167d343614f7d40b7383a2b857fbd4998e8b3b995b5886a3049fa47701a57bd2cb2885db34e3555644d9d1feb51ef873ec34", 0x1000, 0x1, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) 16:36:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 16:36:19 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:19 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:19 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:19 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:36:19 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 16:36:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:19 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) symlinkat(&(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00') 16:36:19 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:19 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:19 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x0, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 16:36:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:32 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:32 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) 16:36:32 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x0, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:32 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:32 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:32 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:32 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 16:36:32 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:33 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pidfd_getfd(0xffffffffffffffff, r0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:33 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pidfd_getfd(0xffffffffffffffff, r0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:33 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:33 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:33 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:33 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00'}) 16:36:33 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:33 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x0, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) 16:36:33 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) getpid() waitid(0x1, 0x0, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r3 = fork() r4 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r3, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:47 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:36:47 executing program 3: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:36:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:36:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 16:36:47 executing program 3: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:48 executing program 3: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:48 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:36:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) 16:36:48 executing program 5: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:00 executing program 5: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 16:37:00 executing program 7: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:00 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:37:00 executing program 3: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:00 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) getpid() waitid(0x1, 0x0, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r3 = fork() r4 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r3, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) 16:37:00 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:00 executing program 5: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:00 executing program 7: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:00 executing program 3: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:00 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:00 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:13 executing program 7: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:13 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:37:13 executing program 3: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:13 executing program 5: symlinkat(0x0, 0xffffffffffffffff, 0x0) 16:37:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) getpid() waitid(0x1, 0x0, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r3 = fork() r4 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r3, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:13 executing program 5: symlinkat(0x0, 0xffffffffffffffff, 0x0) 16:37:13 executing program 3: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:13 executing program 7: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') 16:37:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:13 executing program 5: symlinkat(0x0, 0xffffffffffffffff, 0x0) 16:37:13 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x0, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:27 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:37:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:37:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:27 executing program 7: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:27 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x0, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:27 executing program 3: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) 16:37:27 executing program 3: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:27 executing program 7: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:27 executing program 3: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:27 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) 16:37:27 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x0, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) 16:37:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:39 executing program 3: symlinkat(0x0, 0xffffffffffffffff, 0x0) 16:37:39 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r7, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) 16:37:39 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:39 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:39 executing program 7: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) 16:37:39 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:39 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) 16:37:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, 0x0) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:39 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) 16:37:39 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) 16:37:39 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:37:39 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) 16:37:39 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:37:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) 16:37:39 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:39 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 16:37:39 executing program 0: openat$rfkill(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 16:37:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, 0x0) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:39 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) 16:37:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) 16:37:40 executing program 0: openat$rfkill(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 16:37:55 executing program 0: openat$rfkill(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 16:37:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:37:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:37:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) 16:37:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) 16:37:55 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, 0x0) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:37:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:37:55 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/87) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000001c0)=""/105) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x1) r4 = pidfd_getfd(r0, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r4, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000300)=""/161) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) r8 = openat$cgroup_type(r5, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0x1f, 0x4}}, './file0\x00'}) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000480)=""/84) sendto$unix(r5, &(0x7f0000000500)="4e3e423348e2fae6dc4905fac1a660cbc5ce967ffa353c0a3b7b39621ee23983751cd50d4a8e0f5358748f17994c730a30f993d53485a166bf84c769334cbc1e39ab0b78793ca9a59ea5a540cef69826a1059fcf277abc58a9df9786c96a0c246c4f1becac5b608c5eea5b5b795badcfd75692658bbdbea756b16e8b9c323344d87140149adf3a613ddc7b246ebea9a64aff0670ff035eeb63add88ae88093f30d0505b938b8ef15cd78d4b5f0bec1b4613651f67c32facf9ef066ccb623d38287ed05dcca78fc30e883bf30d912a6c94b19a8b8569349df3f92e948e452ee195e593f749702db7bddc9e5cab88adc155292842cd893d4d7592d42a59bdffe0a68786f3b0972e4659d841fe8ba2b69b0c7f779d81fe93a78737760d10a53138c4c898908ba4e4c9a09ce035d47bcb17366964bc132d8f4884b1882859cadbccda0a94ba611e5f8c25a0b9be0d67f783d81ba28ad23cb215c9964fa64f414ddb06b150ffa0c25b972c17382d0c07c9c42fc4544645bca4493ad4e05bec99b3a17ab6dad1b29a9f642cace132ef619dd73a1b95b739c260d1b955b70453d92694ee4faa5d9b074aab985bce32168d7ac2c342bcfd044a2f23af74a539e29ff076f4f7ed1e54414db9541c04a1e86bcda9fff71d826e0ecdd615a1ecbc70c0224b4fc9e2ae425190101488e78bdd574257fc1fb451cc075cd500dbbcd0f4fe184ac0823a891b4d15af3458748031b3cff1d7871600370ca06b1bbfa6ddf343860244f608024accead93b42263b0a7780ccfdbf911ac91a0ba229298c789c3554e0ed75760a79e407acab1d6db27447eebec02f5a408922ffce3037bbeb0c73226c77cc4ee70901eb2fea59f5fbb0a54e0a37f029509304930f4edfbd6a0b3f900115fd1528ef26a1e9c073c659e0a3ca56a103f43e2a1ca10b6c79238477bb338171fac31d5af46cbacc03b9b3e3cd6b90b5383c9cc536ccd54981d43ac8c75fb187c50187b2ca42f502452a5cdfad6cfdec5e2e35ca303bb3246b04be651b900b311408572051a4d1b3dd5423985b6a86eb3020f29e8840464ae2118613e69683284c7b47ed4b08b9ac9e271becd1195e5e25a1a25c3aea1f8e3ab54fe26eebe870a7d4d2b7c6cfbef357b2b47f2da02ab3ef718d6b8f6aded269d6a470295926b281a6da9ae6d1b97eb78637f14a06ba0a15c83383a7317d4f7f47c7706438954647130ae7b77959a67226478db30e2eebef59d0e59cb96267506706a0e1ee02c2c080a4f577de33ac3f1591d5d646c67a8aa938466e7f269b58ac1024cc60a45145ce555c89a8c6ac163720ec7f4f0bad2475a55a1d1a26511bb9f905319862520627dd6f20ddf8fc71aed032828b8f75dc0b473457038dc9f2a116f6935ed7b4c73fd0c06994686015adf42ff2f2da16c6db421981336e376ad1a80ccee048c6958dbbf9d923d8a2192428138ea969c5d5397f820c7ea82e41c819abed480e563b43f5e399e43e2b92ecadaba018ebef8e2a32e1759cd560d00423849168efe4a68dc3eefb9f7f57c9f5b40bc271453676d372e1f7bbe2953b987b261984c74c449ed380a95665d5b3ff797b3066001c5c575a07981295194d50298b13c55324f3e194adc075e4b48d8b618e21aedbc263eb49cf0129f76d28a7a1d73ab7344be085131c4e1b1a43f91b1068137b20c3ab8657884c47d90e680133a40edbb6c7fc0b8ea7453cf48047076aae433bc0527b56cae1f2301cd8a9ebba0fd293a17c9b04fa7de630d401805c91bac0e9ffeba8f559fd616500e1839a15af538474c4e9d42636864c0f71f12ec565685f9580f32252f2c6be7d5a7643ecff7340212ec75cfc49d50170fd58aea7c718db245c74611e362f5d18a9204141c94bbb49fff7e55a94965750b2b503ac7eef18541015a92c4c2f41da617940099aa245a991a1beb0bdeaa15870bc47754c3f77e2fcedf6eb0e7ab8e4a09af3e1e86728d6b7e13f0f10d75715eccc01cf473b3e894296815d2408af584e9b320b9ad748615d793e7630a0caa8bee350a8fbdde4c14a042418ca5dcb5a899bb08b7490b8b177d6b67e0ef1a5ee5b24bf9ef6b23dc79621cce11b50b7a444e75da84c8c560e90e3205c42b025dc5bee3bb18056a90e3c25c35b68ed1cdc2cada0715e2b653b45b9fe41d39638111718b47684ee6f21994a8f3e3340ac9d1b2bea23f70dcaa1abb8d09173c0cfaaff0946867f8b02c60d3a0e91535d62cb739e6f953b15e08ffb8c553177da87cd2e47147144bc15c200db3a0edbc8049ebb945d007b6f37eee9adc1a3057ff7e3f385a16398440c1b7edb2140cd2c92df9a48c5f352943dce2e30e3da84e2b8e4778d48af9201431864e2242084bdbcb7e5f0ff8660a01b233fc06a6048b3780712345f3dce1c2c8ed830ec206dec935fd4475e86b270953115d8d7a4c220b3910e89153bbbdaa0c51ddf20ce062186bf3bbb5e3ab2bc1552bb87b66ab191456c31d058dbd9fb6818727c3cff6d6ca78305039002ec478ae4eec138ef9973f750d537be0894c94c28e6dc01869e2b6f3679285c68856095371d94c9368370452ce41296986732de2d2d0273b283b3ed9844dab35669033c7f5102247c779431645bc0202a561515dc28e0e64292ecdb6950c85cc3d4c920dabbe4f1608517c7768fda59c268cb04b8e21bf0c479b3fd525a376290e6d8652ae2dbc77b25cead802848f08d0c3dc89a429f4f1a09e20b5214c8cf01eb4d4b43004a3cb8b6ec0e6f6ce9ad6e7579043b38d8ecb68f8a9dd970624df9e013b5be3096f1aa0b0f35140c2bccaab63a63822f0cc3d61f7b15643c027afd92e4b158b64cde41955d37737b3d7a9575e14557f93cd4da6350e9940763ebe3b3225cc581b0e26d902805667665bc8bd0d108c4e912da033d64de80fc85c332a94d8ac3ffad4a00883409ca6b28b7432ac3283b58ea85d4973b149a1431cae324cd416f104d6eb672b9804986809c43ad020168a5245d8d6984605e11fc418e45cb505b962732c9e8cafdf282153ee1a233faba254b2334b121b4d2a27a0e40d0337ca061b2ad7495396eec5ba0cde21be99e6254f16d1ac8889a112e97ee3b92fccdb416a7c0c6f491bf3999393a13cdf11f5c1e3a491880bb7ac9f3c9fa18ddad67edd90a7be236876e816f11c5d63dec3f248961d7ced69deedf5cd21f1f3ef40881c302e758c8c86f8ce174a20cfee5fd264aea6d62ff42052d746ac3eb4581147528639d2d9deb57fbc856a1b9ffdfa134f67dd1505a2377e9adc4ec7f0c76121eadc0c79c33f0f5ed0a01c18f1d4a129893206b40320ee33575b9636a0f3015e3c31f453775dca7567a6d1d94de8cd5b3eb5d4ccc132a4c954d1683788b27f6f029de13f70150e53595c004d64791e4472797bdc0e54801771ade7dc442477b085eee71a6a5065e98f539027573ae50a9a2e575312882c1a3c71ef726e54868ff74897dd4aef9fce5d15eb24440b8d8f6950cfa63a3d00b0ff1f5fd0edceedbcb311faace3048320aa44d9c52e3d26649f9d9cef5a623d9c8c8d1a2acbea31711f040dd0d8d842e07185d5f2b5cf78e5b21122ce13ac42a8455b0868d4a4a390d607793244efda1721711d9395449cc4d4e151a2cb82bb4d85e165081cdb58de1cbf817dc6f8f4784057a7fa2a96008311b6196d717496531ef750f6463dea2c8e5716200ad69826e72f04ed95b44981f20a7f9b8985f60aeba5650c0b73b426764cdbadce42880b2faf9a2645993fce00303e1515befe1d1cb6902ae13d255e3e471a83604ef026c9fd22198877a72d3f2d4c308d1c99062dab01c3732b50d70f7019be7fab8cc58345352a438f6b10e23d216d7590f580ed212dcf80fa1046f2dc7c6d33ea1c28d1530d7af42d7a8f10664446bffe52ad474a28e6c865072d7fca75e642f0510257986b3ce965d057c035d6ba59617955caf0688f2181aaba4f2f1e92172e9fdc3bd8fd4448e69965737b99013dfc9c7a54c013ab6e6bc27a547ca0750a426ad23ea13ec8e6dfcda0743a3b6fe7a4e6ea4562489ae96a1f1cb4402ba5faf86c646a691820e5a60f4eda342d46142b29706d936db846a6fb9b072bdc58793f04b38f56c0050a0587048e5362e15006c023e87e778aeda6ba2aaa0caa0154251ccfbe38ce82ff8267af9145fc1da44e8248816033c20d8ad5e45e3481c38e579100acff844fab41868f8ce33cdbf02375e196eb7dbeddc3fe6eaec37c928284e44fddee6f92499f3f83bf6db98ac2b3018ed6b92f519e6bdd007ef880af9624e8e201d8718020ae70a25bd61e876e6f0b8d73470bd9916ff4c89f571320aaf830d76ab614ad9aae11140a1fd559cf17df9efb9ba9eb1335a24d776e287c06c11c46bf2d8641e894cf6217f16bfad747def65f59cc0ab21851eda5820a14472a85586f1b54fe6a624fd22ed70e3f523da0b2c072d2edc58836e65654677136ef424ae18a2603fce26ad07c59cea7db358c8a94f55edde062e4a3c410d128d9447f017a8f78a121ed2acce0c47a1c75eb783bc60f2e14bfe9aff506a86506f43c756977864ec976560cc7eedecf0b4984627da6120c8fc36068fddc68900b1e782fa4913112c2581c91ff9eecd8925081a200056d1850d06efd7ecbdaf019d9b3d9cb8bf8d3b8c946981d2eca290ecb302b168e029ce5ac71857f1374959d33fb348ed3a9714e68fc7fd605c0c489b1a0781ef9988694a8abf403f1868c0943eb3fb0f209159d188dc5b3b3bbb4e87b596e6490e7134ea7f0c14f2d8cd8aeea2849358fca95b66f836f12237b3c6375c17f4f48d7ab7580151c9f014c69256ef219dc8abdb71ad35eeea961ef56a46ed26a960bf535946fbf5cbf4c1cced8e94607cb2cd3bd45bdad0358ddff7fb9cdc02ec563c32a620b410ade0c0c6a7515e250e3a4df3013bace38892a34ee7a311dace2fce43e946f71f113f3ca37484a4d37f2d3661716954a64f6503e49e112df9c172208bbff6913463c0c49ee2cb76d506139d3ef17d2371e8ec3c7f795685bfb5b2bbfbae0439e2bf751af8eb7665d30d8151252482633001162504f85c1a8dccb7a50684e11676a2d9a8252470d96ef550c682acf33e72fb471ab114fbd447a166a215bb409f68d43ac346a4b0c643c703d026834fd17931c264b14461df6b6bd7c9aa32725644c0e69369ce75ca598e9065c844523912926bed7a5383d4d91147734a8ca5075ab6518896b5d658a1829c491361e293f2174b1b817a51fc83d6625f9dd705d0e9ba8dbe713c6e352189ee0b8c194c45b1339b51b4cbcb2b594105677ccf59cf0b48ede91a6256a74678e6c23e83b77da416e6cc172127ed7d8cce73244f77879ee28062267232691e016a79ba9dded94e027008766641830a8177068e8af01812c253729cdecd2ddc573e1798831364f6619d620bbd73bc8dbd6ea22a216a88e30dc79f35b6dfef14d6efc8c13c06ba367091a7215a3c8af97f5c324b9fa3e3165fa8e62c4eb029710060e3dda24fba213bc0ed542367b387aca72d9e714a68396a690bbe9484252848967eee90c23a43b52cf2ebf4d87d4c392818cf12cf118951bad4be0e9247dfe831d8dd2c05815295f21cd71e7b7d4efa911d7e0dd0eea8e4f01896602ce69fecc30bbaf4df4cc21bf23184b898762a261758b2d41aae1fa14851f40baaecc921fce0d919f538b9a167d343614f7d40b7383a2b857fbd4998e8b3b995b5886a3049fa47701a57bd2cb2885db34e3555644d9d1feb51ef873ec34", 0x1000, 0x1, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) 16:37:55 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 16:37:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) 16:37:55 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/87) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000001c0)=""/105) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x1) r4 = pidfd_getfd(r0, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r4, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000300)=""/161) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) r8 = openat$cgroup_type(r5, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0x1f, 0x4}}, './file0\x00'}) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000480)=""/84) sendto$unix(r5, &(0x7f0000000500)="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", 0x1000, 0x1, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) 16:38:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:38:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 16:38:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) fork() pidfd_getfd(r2, r1, 0x0) 16:38:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0/../file0/file0\x00'}) 16:38:08 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) linkat(r4, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x3400) 16:38:08 executing program 0: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) linkat(r4, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x3400) 16:38:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:08 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) 16:38:08 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) linkat(r4, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x3400) 16:38:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:38:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 16:38:08 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:38:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 16:38:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 16:38:08 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) linkat(r4, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x3400) 16:38:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) fork() 16:38:08 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) 16:38:08 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) 16:38:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:38:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:22 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) 16:38:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 16:38:22 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) 16:38:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:38:22 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 16:38:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, 0x0, 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:22 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) 16:38:22 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 16:38:35 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) 16:38:35 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x10000000) 16:38:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:38:35 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, 0x0, 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:35 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:38:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:38:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00'}) 16:38:35 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) 16:38:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) 16:38:36 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x1ff) 16:38:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:38:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) getpid() mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:38:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:38:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) 16:38:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:38:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:36 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, 0x0, 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:51 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) 16:38:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:38:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) 16:38:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:38:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:38:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:38:51 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 16:38:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:38:51 executing program 5: mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200), 0x20) 16:38:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) 16:38:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:38:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:38:51 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 16:38:51 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x20) 16:38:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:38:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:38:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) 16:39:03 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x2, &(0x7f0000000100)) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) 16:39:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:39:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:39:03 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:03 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:39:03 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:03 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:39:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) 16:39:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x81) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:39:17 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r1, 0x10000000) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) 16:39:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:17 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:39:17 executing program 6: mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) 16:39:17 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:39:17 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:17 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:39:17 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:17 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) 16:39:17 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) 16:39:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x8081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x224e}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffa2b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6afe607f3797317}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa23c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0xe0a, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x51, 0x20, 0x6de, 0x72]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0xdd7215eaa0c19eb5}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff) 16:39:17 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:29 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) 16:39:29 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:39:29 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:29 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:29 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) 16:39:29 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:39:29 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x4040) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:39:30 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x33, &(0x7f0000000000)={0x24, 0xdc, 0x8}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) 16:39:30 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:39:30 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:30 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) 16:39:30 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:30 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 16:39:30 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:30 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:30 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:39:30 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:39:44 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 16:39:44 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:39:44 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:44 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) r4 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:39:44 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:39:44 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:39:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:44 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) 16:39:44 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 16:39:44 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88000, 0x0) 16:39:44 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) 16:39:44 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) r4 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:44 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 16:39:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x0, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:44 executing program 7: openat$rfkill(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 16:39:56 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x0, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:56 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) 16:39:56 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 16:39:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) r4 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r6, &(0x7f0000000480)='./file0/../file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:56 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 16:39:56 executing program 7: openat$rfkill(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 16:39:56 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:39:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x0, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:39:56 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x74, 0x0, 0x20000}, 0x20) 16:39:56 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 16:39:56 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x74, 0x0, 0x20000}, 0x20) 16:39:56 executing program 7: openat$rfkill(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 16:39:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) getpid() r3 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r5, &(0x7f0000000480)='./file0/../file0\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:39:56 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 16:39:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x0, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:39:56 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x74, 0x0, 0x20000}, 0x20) 16:39:56 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x0, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:39:56 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 16:40:08 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 16:40:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:40:08 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 16:40:08 executing program 6: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x74, 0xa}, 0x20) 16:40:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r5, &(0x7f0000000480)='./file0/../file0\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:08 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) 16:40:09 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 16:40:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x0, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:40:09 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) 16:40:09 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:40:09 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 16:40:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x2) r3 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r5, &(0x7f0000000480)='./file0/../file0\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:09 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) 16:40:09 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) 16:40:09 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) 16:40:09 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) 16:40:22 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:40:22 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r8 = getpid() r9 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r8, 0x0, 0x0, 0x0], 0x4, {r9}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) 16:40:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0x0, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:40:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:40:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) r3 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r5, &(0x7f0000000480)='./file0/../file0\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:22 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 16:40:22 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x20000}, 0x20) 16:40:22 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r8 = getpid() r9 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r8, 0x0, 0x0, 0x0], 0x4, {r9}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) 16:40:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0/../file0/file0\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r3, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:22 executing program 3: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:40:22 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:40:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0x0, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:40:22 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 16:40:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:40:22 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r7 = getpid() r8 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r7, 0x0, 0x0, 0x0], 0x4, {r8}}, 0x58) 16:40:22 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:40:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/12) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0/../file0/file0\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r3, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:35 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) 16:40:35 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r7 = getpid() r8 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r7, 0x0, 0x0, 0x0], 0x4, {r8}}, 0x58) 16:40:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0/../file0/file0\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r3, &(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:35 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0x0, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:40:35 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:40:35 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r7 = getpid() r8 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r7, 0x0, 0x0, 0x0], 0x4, {r8}}, 0x58) 16:40:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:40:35 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) 16:40:35 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) 16:40:49 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x20) 16:40:49 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) 16:40:49 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) 16:40:49 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) getpid() openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:40:49 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x0, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:40:49 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:40:49 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) getpid() openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:40:49 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) getpid() 16:40:49 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:40:49 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:40:49 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x20) 16:40:49 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) openat$cgroup(r3, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:40:49 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) 16:40:49 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x0, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:40:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:03 executing program 7: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x20) 16:41:03 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:03 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) 16:41:03 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) openat$cgroup(r3, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:03 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) 16:41:03 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x0, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:41:03 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r8 = getpid() r9 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r8, 0x0, 0x0, 0x0], 0x4, {r9}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) 16:41:03 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) 16:41:03 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) 16:41:03 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) openat$cgroup(r3, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:03 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:41:03 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) 16:41:03 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r7 = getpid() r8 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r7, 0x0, 0x0, 0x0], 0x4, {r8}}, 0x58) 16:41:03 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:03 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) openat$cgroup(r3, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:03 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:03 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:41:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:41:03 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) 16:41:03 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) getpid() openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:03 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 16:41:03 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) openat$cgroup(r3, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:03 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:03 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) getpid() 16:41:17 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:41:17 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) 16:41:17 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:17 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:41:17 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) 16:41:17 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 16:41:17 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:17 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:17 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 16:41:17 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_getfd(r0, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:30 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) 16:41:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0x0, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:41:30 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 16:41:30 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:30 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:30 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_getfd(r0, r0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:30 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000780)=""/19) 16:41:30 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:41:30 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:30 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 16:41:30 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:30 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:30 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 16:41:30 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:31 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:45 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:45 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:45 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:45 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 16:41:45 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:41:45 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r5, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) r10 = getpid() r11 = openat$cgroup(r5, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r10, 0x0, 0x0, 0x0], 0x4, {r11}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) sendto$unix(r4, &(0x7f00000006c0)="55f7f6cd9bef396a176c33c26ca7", 0xe, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 16:41:45 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) 16:41:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0x0, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:41:45 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:45 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 16:41:45 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:45 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:41:45 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:41:45 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:41:45 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x7f}}, './file0/file0\x00'}) 16:41:45 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_getfd(r0, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 16:41:45 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:41:45 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:41:45 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:02 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) pidfd_send_signal(0xffffffffffffffff, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:02 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r9 = getpid() r10 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r9, 0x0, 0x0, 0x0], 0x4, {r10}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0/file0\x00'}) 16:42:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0x0, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:42:02 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_getfd(r0, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 16:42:02 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:02 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 16:42:02 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:02 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:02 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_getfd(r0, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:02 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 16:42:02 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 16:42:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:15 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:15 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:42:15 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r8 = getpid() r9 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r8, 0x0, 0x0, 0x0], 0x4, {r9}}, 0x58) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x48000) 16:42:15 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:15 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:42:15 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 16:42:15 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_getfd(r0, r0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:15 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:42:15 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_send_signal(0xffffffffffffffff, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:15 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:15 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:42:15 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) 16:42:15 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:42:15 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:42:15 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) pidfd_send_signal(0xffffffffffffffff, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:15 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r7 = getpid() r8 = openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000480)={0x50001000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340)=""/108, 0x6c, &(0x7f00000003c0)=""/6, &(0x7f0000000400)=[r7, 0x0, 0x0, 0x0], 0x4, {r8}}, 0x58) 16:42:15 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) 16:42:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:42:28 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0/../file0/file0\x00'}) 16:42:28 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) getpid() openat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) 16:42:28 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:42:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:28 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:28 executing program 6: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) pidfd_send_signal(0xffffffffffffffff, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:28 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:42:28 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) 16:42:28 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:28 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x181000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:42:28 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:42:28 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) getpid() 16:42:28 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:41 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:41 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) 16:42:41 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:41 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r2 = pidfd_getfd(r0, r0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) pidfd_send_signal(r4, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) 16:42:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x181000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:42:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:42:41 executing program 7: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:41 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:41 executing program 7: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:41 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) 16:42:41 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:53 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:42:53 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 16:42:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x181000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:42:53 executing program 7: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:53 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) 16:42:53 executing program 6: pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:42:53 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:53 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:53 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:53 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:42:53 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x181000, 0x0) 16:42:53 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:42:53 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:53 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:53 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 16:42:53 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:42:53 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) pidfd_send_signal(r3, 0x39, &(0x7f0000000180)={0x29, 0x9, 0x200}, 0x0) 16:42:53 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:42:53 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) 16:42:53 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:42:53 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 16:42:54 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:06 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:43:06 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:06 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 16:43:06 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:43:06 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:06 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:43:06 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r2}}, './file0/file0\x00'}) 16:43:20 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:20 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:20 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:43:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:43:20 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:43:20 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:43:20 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 16:43:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:43:20 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:20 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:20 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) pidfd_getfd(r0, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) 16:43:20 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:43:20 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:43:20 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xff}}, './file0\x00'}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) 16:43:20 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:20 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:20 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:43:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:43:35 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:43:35 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:35 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:43:35 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffff5995}}, './file0\x00'}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) 16:43:35 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:35 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:35 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:43:35 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:35 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:35 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) 16:43:35 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:43:35 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) [ 3325.331154] audit: type=1400 audit(1663260215.451:9): avc: denied { kernel } for pid=100211 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 16:43:35 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:35 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) 16:43:35 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:48 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:48 executing program 3: openat$pidfd(0xffffffffffffff9c, 0x0, 0x511000, 0x0) 16:43:48 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:48 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:43:48 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:43:48 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:43:48 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:48 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:43:48 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:43:48 executing program 3: openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:43:48 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:43:48 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:44:00 executing program 3: openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:44:00 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:44:00 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:00 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:44:00 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:00 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:00 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:00 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:00 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:01 executing program 3: openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:44:01 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:01 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:01 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:01 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:44:01 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:01 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) 16:44:01 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:01 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:01 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:44:01 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:01 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:17 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:17 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:44:17 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) 16:44:17 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r9 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:17 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:17 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:17 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:44:17 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:17 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:17 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:44:17 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:17 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:17 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:31 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 16:44:31 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:44:31 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:31 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:31 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:31 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) 16:44:31 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:31 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) 16:44:31 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:31 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) 16:44:31 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:44 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0/../file0/file0\x00'}) 16:44:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:44:44 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:44 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 16:44:44 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:44 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) 16:44:44 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:44 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:44 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:44 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) 16:44:44 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:45 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x9, 0x4, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340)}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:45 executing program 3: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:45 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:58 executing program 3: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:58 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(0x0, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:58 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) 16:44:58 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:58 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:58 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 16:44:58 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:58 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 16:44:58 executing program 3: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:58 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:59 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:59 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:59 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000001780)=0x80000001) 16:44:59 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r6, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) 16:44:59 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) linkat(r2, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 16:44:59 executing program 3: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:59 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) [ 3409.125416] ------------[ cut here ]------------ [ 3409.125456] [ 3409.125462] ====================================================== [ 3409.125469] WARNING: possible circular locking dependency detected [ 3409.125477] 6.0.0-rc5-next-20220915 #1 Not tainted [ 3409.125491] ------------------------------------------------------ [ 3409.125497] syz-executor.2/103297 is trying to acquire lock: [ 3409.125511] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 3409.125581] [ 3409.125581] but task is already holding lock: [ 3409.125587] ffff88803d7a6020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 3409.125645] [ 3409.125645] which lock already depends on the new lock. [ 3409.125645] [ 3409.125652] [ 3409.125652] the existing dependency chain (in reverse order) is: [ 3409.125659] [ 3409.125659] -> #3 (&ctx->lock){....}-{2:2}: [ 3409.125689] _raw_spin_lock+0x2a/0x40 [ 3409.125723] __perf_event_task_sched_out+0x53b/0x18d0 [ 3409.125751] __schedule+0xedd/0x2470 [ 3409.125774] preempt_schedule_common+0x45/0xc0 [ 3409.125799] __cond_resched+0x17/0x30 [ 3409.125822] __mutex_lock+0xa3/0x14d0 [ 3409.125848] __do_sys_perf_event_open+0x1eec/0x32c0 [ 3409.125875] do_syscall_64+0x3b/0x90 [ 3409.125906] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.125944] [ 3409.125944] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 3409.125974] _raw_spin_lock_nested+0x30/0x40 [ 3409.126007] raw_spin_rq_lock_nested+0x1e/0x30 [ 3409.126034] task_fork_fair+0x63/0x4d0 [ 3409.126070] sched_cgroup_fork+0x3d0/0x540 [ 3409.126101] copy_process+0x4183/0x6e20 [ 3409.126122] kernel_clone+0xe7/0x890 [ 3409.126143] user_mode_thread+0xad/0xf0 [ 3409.126166] rest_init+0x24/0x250 [ 3409.126202] arch_call_rest_init+0xf/0x14 [ 3409.126227] start_kernel+0x4c1/0x4e6 [ 3409.126249] secondary_startup_64_no_verify+0xe0/0xeb [ 3409.126279] [ 3409.126279] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 3409.126309] _raw_spin_lock_irqsave+0x39/0x60 [ 3409.126342] try_to_wake_up+0xab/0x1920 [ 3409.126371] up+0x75/0xb0 [ 3409.126396] __up_console_sem+0x6e/0x80 [ 3409.126430] console_unlock+0x46a/0x590 [ 3409.126464] do_con_write+0xc05/0x1d50 [ 3409.126488] con_write+0x21/0x40 [ 3409.126509] n_tty_write+0x4d4/0xfe0 [ 3409.126537] file_tty_write.constprop.0+0x49c/0x8f0 [ 3409.126563] vfs_write+0x9c3/0xd90 [ 3409.126601] ksys_write+0x127/0x250 [ 3409.126638] do_syscall_64+0x3b/0x90 [ 3409.126667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.126705] [ 3409.126705] -> #0 ((console_sem).lock){....}-{2:2}: [ 3409.126735] __lock_acquire+0x2a02/0x5e70 [ 3409.126771] lock_acquire+0x1a2/0x530 [ 3409.126805] _raw_spin_lock_irqsave+0x39/0x60 16:44:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/12) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1fe0000}}, './file0\x00'}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, &(0x7f0000000100)) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x800, &(0x7f0000000200)={0x74, 0xa, 0x20000, {r0}}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0x7fff) r4 = fork() r5 = pidfd_getfd(r2, r1, 0x0) perf_event_open(0x0, r4, 0xe, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0/../file0/file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000440), 0x1, 0x10000) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 16:44:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x20000}, 0x20) getrusage(0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x7fff) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x80, 0x0, 0x9, 0x0, 0x0, 0xffffffffffff8628, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x1000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) [ 3409.126839] down_trylock+0xe/0x70 [ 3409.126866] __down_trylock_console_sem+0x3b/0xd0 [ 3409.126901] vprintk_emit+0x16b/0x560 [ 3409.126936] vprintk+0x84/0xa0 [ 3409.126971] _printk+0xba/0xf1 [ 3409.127008] report_bug.cold+0x72/0xab [ 3409.127036] handle_bug+0x3c/0x70 [ 3409.127065] exc_invalid_op+0x14/0x50 [ 3409.127095] asm_exc_invalid_op+0x16/0x20 [ 3409.127131] group_sched_out.part.0+0x2c7/0x460 [ 3409.127154] ctx_sched_out+0x8f1/0xc10 [ 3409.127176] __perf_event_task_sched_out+0x6d0/0x18d0 [ 3409.127203] __schedule+0xedd/0x2470 [ 3409.127225] preempt_schedule_common+0x45/0xc0 [ 3409.127251] __cond_resched+0x17/0x30 [ 3409.127274] __mutex_lock+0xa3/0x14d0 [ 3409.127299] __do_sys_perf_event_open+0x1eec/0x32c0 [ 3409.127327] do_syscall_64+0x3b/0x90 [ 3409.127356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.127399] [ 3409.127399] other info that might help us debug this: [ 3409.127399] [ 3409.127405] Chain exists of: [ 3409.127405] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 3409.127405] [ 3409.127441] Possible unsafe locking scenario: [ 3409.127441] [ 3409.127445] CPU0 CPU1 [ 3409.127450] ---- ---- [ 3409.127455] lock(&ctx->lock); [ 3409.127467] lock(&rq->__lock); [ 3409.127481] lock(&ctx->lock); [ 3409.127495] lock((console_sem).lock); [ 3409.127507] [ 3409.127507] *** DEADLOCK *** [ 3409.127507] [ 3409.127511] 2 locks held by syz-executor.2/103297: [ 3409.127526] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 3409.127583] #1: ffff88803d7a6020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 3409.127643] [ 3409.127643] stack backtrace: [ 3409.127648] CPU: 0 PID: 103297 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220915 #1 [ 3409.127676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3409.127693] Call Trace: [ 3409.127699] [ 3409.127708] dump_stack_lvl+0x8b/0xb3 [ 3409.127740] check_noncircular+0x263/0x2e0 [ 3409.127776] ? format_decode+0x26c/0xb50 [ 3409.127807] ? print_circular_bug+0x450/0x450 [ 3409.127844] ? enable_ptr_key_workfn+0x20/0x20 [ 3409.127877] ? lock_release+0x547/0x750 [ 3409.127913] ? format_decode+0x26c/0xb50 [ 3409.127947] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 3409.127985] __lock_acquire+0x2a02/0x5e70 [ 3409.128032] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3409.128081] lock_acquire+0x1a2/0x530 [ 3409.128118] ? down_trylock+0xe/0x70 [ 3409.128149] ? rcu_read_unlock+0x40/0x40 [ 3409.128194] ? vprintk+0x84/0xa0 [ 3409.128233] _raw_spin_lock_irqsave+0x39/0x60 [ 3409.128268] ? down_trylock+0xe/0x70 [ 3409.128297] down_trylock+0xe/0x70 [ 3409.128326] ? vprintk+0x84/0xa0 [ 3409.128367] __down_trylock_console_sem+0x3b/0xd0 [ 3409.128406] vprintk_emit+0x16b/0x560 [ 3409.128447] vprintk+0x84/0xa0 [ 3409.128486] _printk+0xba/0xf1 [ 3409.128562] ? record_print_text.cold+0x16/0x16 [ 3409.128609] ? perf_event_update_userpage+0x4e8/0x7c0 [ 3409.128638] ? report_bug.cold+0x66/0xab [ 3409.128670] ? group_sched_out.part.0+0x2c7/0x460 [ 3409.128695] report_bug.cold+0x72/0xab [ 3409.128729] handle_bug+0x3c/0x70 [ 3409.128761] exc_invalid_op+0x14/0x50 [ 3409.128793] asm_exc_invalid_op+0x16/0x20 [ 3409.128832] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 3409.128860] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 3409.128885] RSP: 0018:ffff88803d737978 EFLAGS: 00010006 [ 3409.128906] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 3409.128922] RDX: ffff88803d285040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 3409.128940] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 3409.128956] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803d7a6000 [ 3409.128972] R13: ffff88806ce3ef00 R14: ffffffff85238040 R15: 0000000000000002 [ 3409.128997] ? group_sched_out.part.0+0x2c7/0x460 [ 3409.129026] ? group_sched_out.part.0+0x2c7/0x460 [ 3409.129054] ctx_sched_out+0x8f1/0xc10 [ 3409.129082] __perf_event_task_sched_out+0x6d0/0x18d0 [ 3409.129117] ? lock_is_held_type+0xd7/0x130 [ 3409.129158] ? __perf_cgroup_move+0x160/0x160 [ 3409.129184] ? set_next_entity+0x304/0x550 [ 3409.129223] ? update_curr+0x267/0x740 [ 3409.129263] ? lock_is_held_type+0xd7/0x130 [ 3409.129305] __schedule+0xedd/0x2470 [ 3409.129335] ? io_schedule_timeout+0x150/0x150 [ 3409.129361] ? find_held_lock+0x2c/0x110 [ 3409.129397] ? lock_is_held_type+0xd7/0x130 [ 3409.129436] ? __cond_resched+0x17/0x30 [ 3409.129463] preempt_schedule_common+0x45/0xc0 [ 3409.129492] __cond_resched+0x17/0x30 [ 3409.129516] __mutex_lock+0xa3/0x14d0 [ 3409.129546] ? lock_is_held_type+0xd7/0x130 [ 3409.129584] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 3409.129617] ? mutex_lock_io_nested+0x1310/0x1310 [ 3409.129647] ? lock_release+0x3b2/0x750 [ 3409.129685] ? __up_read+0x192/0x730 [ 3409.129717] ? up_write+0x480/0x480 [ 3409.129749] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 3409.129790] __do_sys_perf_event_open+0x1eec/0x32c0 [ 3409.129828] ? perf_compat_ioctl+0x130/0x130 [ 3409.129855] ? xfd_validate_state+0x59/0x180 [ 3409.129905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3409.129946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3409.129991] do_syscall_64+0x3b/0x90 [ 3409.130023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.130063] RIP: 0033:0x7f9beeda4b19 [ 3409.130082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3409.130106] RSP: 002b:00007f9bec31a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3409.130130] RAX: ffffffffffffffda RBX: 00007f9beeeb7f60 RCX: 00007f9beeda4b19 [ 3409.130148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 3409.130164] RBP: 00007f9beedfef6d R08: 0000000000000002 R09: 0000000000000000 [ 3409.130180] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3409.130196] R13: 00007ffebd4cf4ef R14: 00007f9bec31a300 R15: 0000000000022000 [ 3409.130225] [ 3409.255928] WARNING: CPU: 0 PID: 103297 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 3409.257288] Modules linked in: [ 3409.257788] CPU: 0 PID: 103297 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220915 #1 [ 3409.258979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3409.260597] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 3409.261421] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 3409.264068] RSP: 0018:ffff88803d737978 EFLAGS: 00010006 [ 3409.264823] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 3409.265861] RDX: ffff88803d285040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 3409.266808] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 3409.267761] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803d7a6000 [ 3409.268714] R13: ffff88806ce3ef00 R14: ffffffff85238040 R15: 0000000000000002 [ 3409.269672] FS: 00007f9bec31a700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 3409.270753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3409.271527] CR2: 0000000020000380 CR3: 000000003d380000 CR4: 0000000000350ef0 [ 3409.272471] Call Trace: [ 3409.272834] [ 3409.273152] ctx_sched_out+0x8f1/0xc10 [ 3409.273693] __perf_event_task_sched_out+0x6d0/0x18d0 [ 3409.274394] ? lock_is_held_type+0xd7/0x130 [ 3409.275006] ? __perf_cgroup_move+0x160/0x160 [ 3409.275621] ? set_next_entity+0x304/0x550 [ 3409.276209] ? update_curr+0x267/0x740 [ 3409.276769] ? lock_is_held_type+0xd7/0x130 [ 3409.277374] __schedule+0xedd/0x2470 [ 3409.277899] ? io_schedule_timeout+0x150/0x150 [ 3409.278527] ? find_held_lock+0x2c/0x110 [ 3409.279103] ? lock_is_held_type+0xd7/0x130 [ 3409.279714] ? __cond_resched+0x17/0x30 [ 3409.280261] preempt_schedule_common+0x45/0xc0 [ 3409.280894] __cond_resched+0x17/0x30 [ 3409.281415] __mutex_lock+0xa3/0x14d0 [ 3409.281943] ? lock_is_held_type+0xd7/0x130 [ 3409.282542] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 3409.283245] ? mutex_lock_io_nested+0x1310/0x1310 [ 3409.283926] ? lock_release+0x3b2/0x750 [ 3409.284486] ? __up_read+0x192/0x730 [ 3409.285032] ? up_write+0x480/0x480 [ 3409.285545] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 3409.286245] __do_sys_perf_event_open+0x1eec/0x32c0 [ 3409.286937] ? perf_compat_ioctl+0x130/0x130 [ 3409.287546] ? xfd_validate_state+0x59/0x180 [ 3409.288178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3409.288896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3409.289611] do_syscall_64+0x3b/0x90 [ 3409.290130] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3409.290858] RIP: 0033:0x7f9beeda4b19 [ 3409.291371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3409.293815] RSP: 002b:00007f9bec31a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3409.294843] RAX: ffffffffffffffda RBX: 00007f9beeeb7f60 RCX: 00007f9beeda4b19 [ 3409.295799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 3409.296773] RBP: 00007f9beedfef6d R08: 0000000000000002 R09: 0000000000000000 [ 3409.297737] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3409.298709] R13: 00007ffebd4cf4ef R14: 00007f9bec31a300 R15: 0000000000022000 [ 3409.299700] [ 3409.300024] irq event stamp: 360 [ 3409.300476] hardirqs last enabled at (359): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 3409.301765] hardirqs last disabled at (360): [] __schedule+0x1225/0x2470 [ 3409.302891] softirqs last enabled at (356): [] __irq_exit_rcu+0x11b/0x180 [ 3409.304051] softirqs last disabled at (225): [] __irq_exit_rcu+0x11b/0x180 [ 3409.305221] ---[ end trace 0000000000000000 ]--- 16:44:59 executing program 6: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) openat$cgroup_procs(r7, &(0x7f00000014c0)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 16:44:59 executing program 3: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:59 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:59 executing program 3: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x5}, 0x4801, 0x2, 0x238, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:59 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000013c0)) mount_setattr(r4, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) 16:44:59 executing program 7: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x2) 16:44:59 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1004, 0xac000) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000001300)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/1, &(0x7f0000001280)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000013c0)) mount_setattr(r5, &(0x7f0000001400)='./file0\x00', 0x800, &(0x7f0000001440)={0x80, 0x2, 0x40000, {r1}}, 0x20) syz_open_dev$vcsn(&(0x7f0000001480), 0x9, 0x200) syz_genetlink_get_family_id$gtp(&(0x7f0000001540), r2) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001640)=""/151) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x4, 0xb83}}, './file0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000001740), 0xfffffffffffffffd, 0x30000) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000001780)=0x80000001) VM DIAGNOSIS: 16:44:59 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803d7373c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9bec31a700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000380 CR3=000000003d380000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffffd400019c838 RBX=0000000000000000 RCX=ffffffff81692bb7 RDX=fffff9400019c839 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88803b798ce0 RSP=ffff88803d42f640 R8 =0000000000000000 R9 =ffffea0000ce41c7 R10=fffff9400019c838 R11=0000000000000001 R12=ffff88803d42fa30 R13=ffffea0000ce41c0 R14=dffffc0000000000 R15=ffffea0000ce41c0 RIP=ffffffff814613b4 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200012c0 CR3=0000000010340000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000