$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:43 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:43 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:43 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:43 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:43 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:43 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:43 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:44 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:44 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:44 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:44 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:44 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:44 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:44 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:44 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:44 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:44 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:45 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:45 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:46 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:47 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:47 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:47 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:47 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:47 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:47 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:47 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:47 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:47 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:47 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:48 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:48 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:48 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:48 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:48 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:48 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:48 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:48 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:48 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:49 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:49 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:49 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:49 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:49 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:49 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0x0, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:50 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:50 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:51 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:51 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:52 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:52 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:52 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:52 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:52 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:52 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:53 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:53 executing program 2:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 3:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:53 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:54 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:54 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:54 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:54 executing program 3:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:54 executing program 5:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:54 executing program 4:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:54 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 3:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 5:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 4:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 2:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:55 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:56 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:56 executing program 4:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:56 executing program 5:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:56 executing program 3:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:56 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:56 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:56 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:56 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 4:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 2:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 2:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:57 executing program 3:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:58 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:58 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r1, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:58 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r1, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:58 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:58 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:58 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:58 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:58 executing program 4:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 0:
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 2:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:42:59 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:42:59 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:00 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:00 executing program 0:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:00 executing program 2:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:00 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:00 executing program 3:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:00 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:00 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(0x0, 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 2:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 5:
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:01 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(0x0, 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(0x0, 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:02 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:03 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0))
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r1, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r2})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r1, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:03 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:03 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:03 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:03 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:03 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x0, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:03 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(0x0, 0x7ed, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:03 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x0, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:04 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:05 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:05 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x0, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:05 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:05 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:05 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:05 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:05 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:05 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x0, 0x109000)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r2 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r2, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:06 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r2 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r2, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r2 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r2, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:07 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:08 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:08 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, 0x0, 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:08 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:08 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:08 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:08 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, 0x0, 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:08 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
openat$dir(0xffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:08 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
openat$dir(0xffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, 0x0, 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:09 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:10 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r0 = openat$dir(0xffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r0, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:10 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:10 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:10 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:10 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r0 = openat$dir(0xffffff9c, 0x0, 0x0, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r0, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:10 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:10 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:10 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:10 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

[  931.377351][ T1199] ieee802154 phy0 wpan0: encryption failed: -22
[  931.383775][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
12:43:11 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet(0x2, 0x2, 0x5bda)
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:11 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:12 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:12 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:13 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:13 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:13 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:13 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:13 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:13 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:14 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:14 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:14 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:14 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:14 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:14 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:14 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:14 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r2, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000004c0)={0x1, r2})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r2, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:15 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r2=>0x0, &(0x7f00000005c0))
r3 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r2=>0x0, &(0x7f00000005c0))
r3 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:16 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r2=>0x0, &(0x7f00000005c0))
r3 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:17 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:17 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:17 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:17 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:17 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0))
r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0))
r4 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:17 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x200, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:18 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:19 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:19 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:19 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:19 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:19 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:19 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:19 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:20 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:20 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:20 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:20 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:20 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:20 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:20 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:20 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:21 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:21 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:21 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:21 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:21 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:21 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:21 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:21 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:22 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:22 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
r5 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:23 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:24 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:24 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:24 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:24 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:24 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:24 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:24 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:25 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:25 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:25 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:25 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:25 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:25 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:25 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:25 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:25 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:26 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:26 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r6 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r6, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:26 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:26 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:26 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:26 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:26 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:27 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:28 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:28 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:28 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:28 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:28 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:28 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:28 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:28 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, 0xffffffffffffffff, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:28 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:29 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r5 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r5, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r6 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r6, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:29 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:29 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, 0xffffffffffffffff, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:29 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x10, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:29 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:29 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, 0xffffffffffffffff, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:29 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, 0xffffffffffffffff, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x10, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x10, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

12:43:30 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:30 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
r3 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x10, r3, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, 0xffffffffffffffff, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, 0xffffffffffffffff, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r8 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r8, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:31 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 1:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0x0, 0x40, &(0x7f0000000040))
r0 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
r1 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000005c0))
r2 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x0)
write$hidraw(r2, &(0x7f00000007c0), 0x0)
io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x3c7, 0x0, r1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, 0xffffffffffffffff, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x183f)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 3:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 2:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
write$hidraw(0xffffffffffffffff, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
r7 = io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x810, r7, 0x0)
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

12:43:32 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

[  952.834983][T25962] ==================================================================
[  952.843106][T25962] BUG: KASAN: use-after-free in nfc_llcp_find_local+0xcf/0xe0
[  952.850689][T25962] Read of size 8 at addr ffff88807defe000 by task syz-executor.1/25962
[  952.858982][T25962] 
[  952.861318][T25962] CPU: 1 PID: 25962 Comm: syz-executor.1 Not tainted 6.2.0-rc3-syzkaller-00021-g7dd4b804e080 #0
[  952.871762][T25962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  952.881845][T25962] Call Trace:
12:43:33 executing program 4:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

[  952.885141][T25962]  <TASK>
[  952.888091][T25962]  dump_stack_lvl+0xd1/0x138
[  952.892743][T25962]  print_report+0x15e/0x45d
[  952.897331][T25962]  ? __phys_addr+0xc8/0x140
[  952.901889][T25962]  ? nfc_llcp_find_local+0xcf/0xe0
[  952.907039][T25962]  kasan_report+0xbf/0x1f0
[  952.911543][T25962]  ? nfc_llcp_find_local+0xcf/0xe0
[  952.916692][T25962]  nfc_llcp_find_local+0xcf/0xe0
[  952.921670][T25962]  nfc_llcp_unregister_device+0x1a/0x260
[  952.927347][T25962]  nfc_unregister_device+0x196/0x330
[  952.932742][T25962]  virtual_ncidev_close+0x52/0xb0
[  952.937891][T25962]  __fput+0x27c/0xa90
[  952.941978][T25962]  ? virtual_nci_open+0x10/0x10
[  952.946878][T25962]  task_work_run+0x16f/0x270
[  952.951526][T25962]  ? task_work_cancel+0x30/0x30
[  952.956435][T25962]  exit_to_user_mode_prepare+0x23c/0x250
[  952.962198][T25962]  syscall_exit_to_user_mode+0x1d/0x50
[  952.967715][T25962]  __do_fast_syscall_32+0x72/0xf0
[  952.972810][T25962]  do_fast_syscall_32+0x33/0x70
[  952.977711][T25962]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  952.984149][T25962] RIP: 0023:0xf7fa0549
[  952.988242][T25962] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  953.007885][T25962] RSP: 002b:00000000f749fb10 EFLAGS: 00000286 ORIG_RAX: 0000000000000006
[  953.016330][T25962] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000002
[  953.024332][T25962] RDX: 0000000000000000 RSI: 00000000f734d000 RDI: 00000000000e8a98
[  953.032332][T25962] RBP: 00000000f737c0c0 R08: 0000000000000000 R09: 0000000000000000
[  953.040334][T25962] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[  953.048331][T25962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  953.056333][T25962]  </TASK>
[  953.059369][T25962] 
[  953.061705][T25962] Allocated by task 25976:
[  953.066134][T25962]  kasan_save_stack+0x22/0x40
[  953.070843][T25962]  kasan_set_track+0x25/0x30
[  953.075458][T25962]  __kasan_kmalloc+0xa5/0xb0
[  953.080084][T25962]  nfc_llcp_register_device+0x49/0x9e0
[  953.085577][T25962]  nfc_register_device+0x70/0x3b0
[  953.090641][T25962]  nci_register_device+0x7cb/0xb50
[  953.095801][T25962]  virtual_ncidev_open+0x14f/0x230
[  953.100946][T25962]  misc_open+0x37a/0x4a0
[  953.105291][T25962]  chrdev_open+0x26a/0x770
[  953.109756][T25962]  do_dentry_open+0x6cc/0x13f0
[  953.114612][T25962]  path_openat+0x1bbc/0x2a50
[  953.119280][T25962]  do_filp_open+0x1ba/0x410
[  953.123818][T25962]  do_sys_openat2+0x16d/0x4c0
[  953.128524][T25962]  __ia32_compat_sys_openat+0x143/0x1f0
[  953.134094][T25962]  __do_fast_syscall_32+0x65/0xf0
[  953.139154][T25962]  do_fast_syscall_32+0x33/0x70
[  953.144034][T25962]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  953.150397][T25962] 
[  953.152728][T25962] Freed by task 25967:
[  953.156801][T25962]  kasan_save_stack+0x22/0x40
[  953.161505][T25962]  kasan_set_track+0x25/0x30
[  953.166119][T25962]  kasan_save_free_info+0x2e/0x40
[  953.171175][T25962]  ____kasan_slab_free+0x160/0x1c0
[  953.176372][T25962]  slab_free_freelist_hook+0x8b/0x1c0
[  953.181859][T25962]  __kmem_cache_free+0xaf/0x3b0
[  953.186732][T25962]  nfc_llcp_unregister_device+0x1ba/0x260
[  953.192495][T25962]  nfc_unregister_device+0x196/0x330
[  953.197821][T25962]  virtual_ncidev_close+0x52/0xb0
[  953.202965][T25962]  __fput+0x27c/0xa90
[  953.206979][T25962]  task_work_run+0x16f/0x270
[  953.211603][T25962]  exit_to_user_mode_prepare+0x23c/0x250
[  953.217361][T25962]  syscall_exit_to_user_mode+0x1d/0x50
[  953.222934][T25962]  __do_fast_syscall_32+0x72/0xf0
[  953.227995][T25962]  do_fast_syscall_32+0x33/0x70
[  953.232879][T25962]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  953.239248][T25962] 
[  953.241581][T25962] Last potentially related work creation:
[  953.247306][T25962]  kasan_save_stack+0x22/0x40
[  953.252016][T25962]  __kasan_record_aux_stack+0xbc/0xd0
[  953.258465][T25962]  insert_work+0x48/0x350
[  953.262828][T25962]  __queue_work+0x693/0x13b0
[  953.267446][T25962]  queue_work_on+0xf2/0x110
[  953.271981][T25962]  rfkill_register+0x67c/0xb00
[  953.276838][T25962]  nfc_register_device+0x124/0x3b0
[  953.281991][T25962]  nci_register_device+0x7cb/0xb50
[  953.287135][T25962]  virtual_ncidev_open+0x14f/0x230
[  953.292288][T25962]  misc_open+0x37a/0x4a0
[  953.296569][T25962]  chrdev_open+0x26a/0x770
[  953.301032][T25962]  do_dentry_open+0x6cc/0x13f0
[  953.305835][T25962]  path_openat+0x1bbc/0x2a50
[  953.310478][T25962]  do_filp_open+0x1ba/0x410
[  953.315022][T25962]  do_sys_openat2+0x16d/0x4c0
[  953.319726][T25962]  __ia32_compat_sys_openat+0x143/0x1f0
[  953.325302][T25962]  __do_fast_syscall_32+0x65/0xf0
[  953.330368][T25962]  do_fast_syscall_32+0x33/0x70
[  953.335255][T25962]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  953.341621][T25962] 
[  953.343957][T25962] Second to last potentially related work creation:
[  953.350550][T25962]  kasan_save_stack+0x22/0x40
[  953.355258][T25962]  __kasan_record_aux_stack+0xbc/0xd0
[  953.360663][T25962]  __call_rcu_common.constprop.0+0x99/0x820
[  953.366653][T25962]  netlink_release+0xdcb/0x1e60
[  953.371611][T25962]  __sock_release+0xcd/0x280
[  953.376282][T25962]  sock_close+0x1c/0x20
[  953.380475][T25962]  __fput+0x27c/0xa90
12:43:33 executing program 5:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc081)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

[  953.384503][T25962]  task_work_run+0x16f/0x270
[  953.389133][T25962]  exit_to_user_mode_prepare+0x23c/0x250
[  953.394835][T25962]  syscall_exit_to_user_mode+0x1d/0x50
[  953.400322][T25962]  __do_fast_syscall_32+0x72/0xf0
[  953.405380][T25962]  do_fast_syscall_32+0x33/0x70
[  953.410276][T25962]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  953.416643][T25962] 
[  953.418977][T25962] The buggy address belongs to the object at ffff88807defe000
[  953.418977][T25962]  which belongs to the cache kmalloc-2k of size 2048
[  953.433054][T25962] The buggy address is located 0 bytes inside of
[  953.433054][T25962]  2048-byte region [ffff88807defe000, ffff88807defe800)
[  953.446269][T25962] 
[  953.448602][T25962] The buggy address belongs to the physical page:
[  953.455026][T25962] page:ffffea0001f7be00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7def8
[  953.465205][T25962] head:ffffea0001f7be00 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[  953.475293][T25962] anon flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  953.483743][T25962] raw: 00fff00000010200 ffff888012442000 0000000000000000 dead000000000001
[  953.492360][T25962] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  953.500965][T25962] page dumped because: kasan: bad access detected
[  953.507391][T25962] page_owner tracks the page as allocated
[  953.513116][T25962] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5112, tgid 5112 (syz-executor.5), ts 60803559907, free_ts 60711662919
12:43:33 executing program 0:
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xb9b3}}, 0x24)
socketpair(0xa, 0xa, 0x40, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet(0x2, 0x2, 0x5bda)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0), 0x436480, 0x0)
bind$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000340)="a91f69f7d5fc4a211dfae658dcce1526398809daf6bc75bd09b6dd69b14e3f6b3b30851db46d4b885d04dddd2dcc7ec8a30f3a44b179b68f6bed086e76b18829fa47f36fac8d13698b29b150c912f6c86e3a5309746e6cf5c15b0869d2126318ea901dea2c5f0dd7e40ab9ca6b0cc6ebf471353b648ebac51570220fb92f406df27686d985fb40bfdc3830ac5c03d3c0632d26ba4eb24d4dcd7c039cc55a3b62fbed74ec0b79aa392fe7a87ed6e0ad31a238ac466f87f560eaefb8640bc9206134007ab47ac719fb43d7ab9335a221e04e883593c512d6335b79bfdb927022", 0xdf, 0x20000080, &(0x7f0000000440)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x24)
r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x80, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r3})
syz_io_uring_setup(0x20e6, &(0x7f0000000500)={0x0, 0x3c28, 0x40, 0x3, 0x6f, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = openat$dir(0xffffff9c, &(0x7f0000000600)='./file0\x00', 0x101000, 0x8)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000640)='./file0\x00', 0x22, 0x41, 0x23456}, 0x1)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/174)
r7 = syz_open_dev$hidraw(&(0x7f0000000780), 0x7ed, 0x109000)
write$hidraw(r7, &(0x7f00000007c0)="c7b571cca9b4a2efc3a7438d17d1b7f97fe173bb6d8b6306be4e9a56996c0691f93fcd067bed49f76f402cb80d2ac9a292d7ee2b14b80120c8b2a3e43053a3e415f36764a348ebe7e5990f0a546a1c890a927d551a8ec05bd3a5bc0e0bea0d5b77f1446b629222f6ca971baedb05d5533aef67fe520ec07596139d3b1a7ee7f22294192ec7ecdb5acd3074bdd27ba5628b2d6e51864e59291dc2958e3ce3b4d90337fda8b047acacbc68482a97", 0xad)
io_uring_setup(0x48cb, &(0x7f0000000880)={0x0, 0x9353, 0x200, 0x2, 0x3c7, 0x0, r4})
ioctl$I2C_RETRIES(r3, 0x701, 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000900)={0x3, 0xa4a9})
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000940))
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3)
openat$nci(0xffffff9c, &(0x7f0000000ac0), 0x2, 0x0)

[  953.534688][T25962]  get_page_from_freelist+0x119c/0x2ce0
[  953.540357][T25962]  __alloc_pages+0x1cb/0x5b0
[  953.544979][T25962]  alloc_pages+0x1aa/0x270
[  953.549426][T25962]  allocate_slab+0x25f/0x350
[  953.554061][T25962]  ___slab_alloc+0xa91/0x1400
[  953.558758][T25962]  __slab_alloc.constprop.0+0x56/0xa0
[  953.564153][T25962]  __kmem_cache_alloc_node+0x1a4/0x430
[  953.569634][T25962]  kmalloc_trace+0x26/0x60
[  953.574231][T25962]  rtnl_newlink+0x4a/0xa0
[  953.578663][T25962]  rtnetlink_rcv_msg+0x43e/0xca0
[  953.583636][T25962]  netlink_rcv_skb+0x165/0x440
[  953.588434][T25962]  netlink_unicast+0x547/0x7f0
[  953.593238][T25962]  netlink_sendmsg+0x91b/0xe10
[  953.598036][T25962]  sock_sendmsg+0xd3/0x120
[  953.602542][T25962]  __sys_sendto+0x23a/0x340
[  953.607077][T25962]  __do_compat_sys_socketcall+0x62e/0x720
[  953.612884][T25962] page last free stack trace:
[  953.617567][T25962]  free_pcp_prepare+0x65c/0xc00
[  953.622452][T25962]  free_unref_page+0x1d/0x490
[  953.627158][T25962]  __unfreeze_partials+0x17c/0x1a0
[  953.632308][T25962]  qlist_free_all+0x6a/0x170
[  953.636994][T25962]  kasan_quarantine_reduce+0x192/0x220
[  953.642488][T25962]  __kasan_slab_alloc+0x66/0x90
[  953.647367][T25962]  kmem_cache_alloc_node+0x1f1/0x460
[  953.652677][T25962]  __alloc_skb+0x216/0x310
[  953.657124][T25962]  netlink_ack+0x184/0x1370
[  953.661662][T25962]  netlink_rcv_skb+0x34f/0x440
[  953.666470][T25962]  netlink_unicast+0x547/0x7f0
[  953.671270][T25962]  netlink_sendmsg+0x91b/0xe10
[  953.676070][T25962]  sock_sendmsg+0xd3/0x120
[  953.680514][T25962]  __sys_sendto+0x23a/0x340
[  953.685052][T25962]  __do_compat_sys_socketcall+0x62e/0x720
[  953.690795][T25962]  __do_fast_syscall_32+0x65/0xf0
[  953.695859][T25962] 
[  953.698194][T25962] Memory state around the buggy address:
[  953.703838][T25962]  ffff88807defdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  953.711922][T25962]  ffff88807defdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  953.720015][T25962] >ffff88807defe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  953.728097][T25962]                    ^
[  953.732182][T25962]  ffff88807defe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  953.740270][T25962]  ffff88807defe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  953.748349][T25962] ==================================================================
[  953.758814][T25962] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  953.766067][T25962] CPU: 0 PID: 25962 Comm: syz-executor.1 Not tainted 6.2.0-rc3-syzkaller-00021-g7dd4b804e080 #0
[  953.776506][T25962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  953.786586][T25962] Call Trace:
[  953.789887][T25962]  <TASK>
[  953.792841][T25962]  dump_stack_lvl+0xd1/0x138
[  953.797473][T25962]  panic+0x2cc/0x626
[  953.801435][T25962]  ? panic_print_sys_info.part.0+0x110/0x110
[  953.807451][T25962]  ? preempt_schedule_thunk+0x1a/0x20
[  953.812874][T25962]  ? preempt_schedule_common+0x59/0xc0
[  953.818365][T25962]  check_panic_on_warn.cold+0x19/0x35
[  953.823760][T25962]  end_report.part.0+0x36/0x73
[  953.828549][T25962]  ? nfc_llcp_find_local+0xcf/0xe0
[  953.833670][T25962]  kasan_report.cold+0xa/0xf
[  953.838279][T25962]  ? nfc_llcp_find_local+0xcf/0xe0
[  953.843415][T25962]  nfc_llcp_find_local+0xcf/0xe0
[  953.848379][T25962]  nfc_llcp_unregister_device+0x1a/0x260
[  953.854038][T25962]  nfc_unregister_device+0x196/0x330
[  953.859354][T25962]  virtual_ncidev_close+0x52/0xb0
[  953.864401][T25962]  __fput+0x27c/0xa90
[  953.868396][T25962]  ? virtual_nci_open+0x10/0x10
[  953.873268][T25962]  task_work_run+0x16f/0x270
[  953.877886][T25962]  ? task_work_cancel+0x30/0x30
[  953.882777][T25962]  exit_to_user_mode_prepare+0x23c/0x250
[  953.888421][T25962]  syscall_exit_to_user_mode+0x1d/0x50
[  953.893891][T25962]  __do_fast_syscall_32+0x72/0xf0
[  953.898933][T25962]  do_fast_syscall_32+0x33/0x70
[  953.903803][T25962]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  953.910144][T25962] RIP: 0023:0xf7fa0549
[  953.914217][T25962] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  953.933828][T25962] RSP: 002b:00000000f749fb10 EFLAGS: 00000286 ORIG_RAX: 0000000000000006
[  953.942251][T25962] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000002
[  953.950223][T25962] RDX: 0000000000000000 RSI: 00000000f734d000 RDI: 00000000000e8a98
[  953.958198][T25962] RBP: 00000000f737c0c0 R08: 0000000000000000 R09: 0000000000000000
[  953.966175][T25962] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[  953.974148][T25962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  953.982127][T25962]  </TASK>
[  953.985312][T25962] Kernel Offset: disabled
[  953.989634][T25962] Rebooting in 86400 seconds..